• caglararli@hotmail.com
  • 05386281520

CVE-2023-46219 | cURL up to 8.4.0 HSTS File Name lib/fopen.c missing encryption

Çağlar Arlı      -    23 Views

CVE-2023-46219 | cURL up to 8.4.0 HSTS File Name lib/fopen.c missing encryption

A vulnerability, which was classified as problematic, was found in cURL up to 8.4.0. This affects an unknown part in the library lib/fopen.c of the component HSTS File Name Handler. The manipulation leads to missing encryption of sensitive data. This vulnerability is uniquely identified as CVE-2023-46219. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.