Description
curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used.
CVSS breakdown
CVSS 3.1
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux10.0 – 10.0
- Fujitsu / m10-1_firmwarexcp2410
- Fujitsu / m10-4_firmwarexcp2410
- Fujitsu / m10-4s_firmwarexcp2410
- Fujitsu / m12-1_firmwarexcp2410
- Fujitsu / m12-2_firmwarexcp2410
- Fujitsu / m12-2s_firmwarexcp2410
- haxx / curl7.20.0 – 7.70.0
- Siemens / sinec_infrastructure_network_services1.0.1.1
- Splunk / Universal Forwarder8.2.0 – 8.2.12
- Splunk / Universal Forwarder9.1.0 – 9.1.0
Updated 45m ago · 8 sources