Vulnerability in Haxx Curl
CVE-2022-30115
Using its HSTS support, curl can be instructed to use HTTPS directly insteadof using an insecure clear-text HTTP step even when HTTP is provided in theURL. This mechanism could be bypassed if the host name in the given URL used atrailing dot while not using one when it built the HSTS cache. Or the otherway around - by having the trailing dot in the HSTS cache and *not* using thetrailing dot in the URL.
EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- support@hackerone.com (Exploit, Third Party Advisory)
- support@hackerone.com (Third Party Advisory)
- support@hackerone.com (mailing-list, Patch, Mailing List, Third Party Advisory)
- support@hackerone.com (vendor-advisory, Third Party Advisory)
- support@hackerone.com (mailing-list, Mailing List, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-30115?
- CVE-2022-30115 is a medium-severity vulnerability in Haxx Curl, classified under Missing Cryptographic Step. CVSS score: 4.3/10. Published 2022-06-02.
- How severe is CVE-2022-30115?
- Medium severity. CVSS v3 base score is 4.3 out of 10.
- Is CVE-2022-30115 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.