Vulnerability · Published Aug 5, 2021 · Assigned by hackerone

CVE-2021-22923

Medium 5.3

In plain English

A medium-severity security flaw in https://github.com/curl/curl. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)5.3Medium

Exploit odds (30 days)2.0%top 19.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

When curl is instructed to get content using the metalink feature, and a user name and password are used to download the metalink XML file, those same credentials are then subsequently passed on to each of the servers from which curl will download or try to download the contents from. Often contrary to the user's expectations and intentions and without telling the user it happened.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Alpine:v3.20	curl	7.78.0-r0	ALPINE-CVE-2021-22923
Alpine:v3.21	curl	7.78.0-r0	ALPINE-CVE-2021-22923
Alpine:v3.22	curl	7.78.0-r0	ALPINE-CVE-2021-22923
Alpine:v3.23	curl	7.78.0-r0	ALPINE-CVE-2021-22923
Alpine:v3.24	curl	7.78.0-r0	ALPINE-CVE-2021-22923
Debian:12	curl	7.79.1-1	DEBIAN-CVE-2021-22923
Debian:13	curl	7.79.1-1	DEBIAN-CVE-2021-22923
Debian:14	curl	7.79.1-1	DEBIAN-CVE-2021-22923
Rocky Linux:8	curl	0:7.61.1-18.el8_4.1	RLSA-2021:3582

Affected products (as reported)

Vendor	Product	Versions
n/a	https://github.com/curl/curl	curl 7.27.0 to and including 7.77.0

Weakness: CWE-319

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References