The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a different URL usingthe wrong host name when it is later retrieved.For example, a URL like http://example.com%2F127.0.0.1/
, would be allowed bythe parser and get transposed into http://example.com/127.0.0.1/
. This flawcan be used to circumvent filters, checks and more.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "curl-dbgsym": "7.81.0-1ubuntu1.2", "curl": "7.81.0-1ubuntu1.2", "libcurl4": "7.81.0-1ubuntu1.2", "libcurl4-gnutls-dev": "7.81.0-1ubuntu1.2", "libcurl4-dbgsym": "7.81.0-1ubuntu1.2", "libcurl3-nss": "7.81.0-1ubuntu1.2", "libcurl4-doc": "7.81.0-1ubuntu1.2", "libcurl3-nss-dbgsym": "7.81.0-1ubuntu1.2", "libcurl3-gnutls": "7.81.0-1ubuntu1.2", "libcurl3-gnutls-dbgsym": "7.81.0-1ubuntu1.2", "libcurl4-openssl-dev": "7.81.0-1ubuntu1.2", "libcurl4-nss-dev": "7.81.0-1ubuntu1.2" } ] }