CVE-2020-8169

HIGH 7.5EPSS 3.4%

curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).

CVSS v3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS: 3.43% chance of exploitation in the next 30 days, 88th percentile
Published: 2020-12-14
Updated: 2024-08-04

Proof-of-concept exploits (1)

https://hackerone.com/reports/874778

References

Related