CVE-2022-27776 | curl (CWE-0)

[mgulter]

A medium severity vulnerability has been discovered in your project.

Project Name: IssueTest

Scanner Name: trivy

CVE ID: CVE-2022-27776

Target: nginx:latest (debian 11.3)

Packages:

• curl : 7.74.0-1.3+deb11u1 - Fixed Version:

References:

• https://curl.se/docs/CVE-2022-27776.html
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27776
• https://hackerone.com/reports/1547048
• https://security.netapp.com/advisory/ntap-20220609-0008/
• https://ubuntu.com/security/notices/USN-5397-1

Tool Description: A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.

Custom Description: test assignment