Vulnerability identifier: #VU51821

Vulnerability risk: Medium

CVSSv3.1:

CVE-ID: CVE-2021-22876

CWE-ID:

Exploitation vector: Network

Exploit availability:

Vulnerable software:
cURL
Client/Desktop applications / Other client software

Vendor: curl.haxx.se

Description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests and therefore risks leaking sensitive data to the server that is the target of the second HTTP request.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

cURL: 7.1 - 7.75.0

---

Fixed software versions

CPE

• cpe:2.3:a:curl_haxx_se:curl:7.75.0:*:*:*:*:*:*:*

External links
http://curl.haxx.se/docs/CVE-2021-22876.html

---

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?