VDB
OESA-2023-1962
OESA-2023-1962
PUBLISHED
CVSS 4 MEDIUM
cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols. Security Fix(es): When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use. (CVE-2023-46219)
Risk Scores
CVSS 3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| openEuler:22.03-LTS-SP2 | curl | 0 |
Timeline
- Dec 22, 2023 CVE Published
- Aug 18, 2026 CVE Updated
- Nov 1, 2026 Security Advisory