CVE-2014-3620

Published Nov 18, 2014

Last updated 18 days ago

Overview

Description
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
Source
secalert@redhat.com
NVD status
Modified
Products
curl, libcurl, mac_os_x

Risk scores

CVSS 2.0

Type
Primary
Base score
5
Impact score
2.9
Exploitability score
10
Vector string
AV:N/AC:L/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov
CWE-310

Social media

Hype score
Not currently trending

Configurations