Description
A flaw was found in curl before version 7.51. If cookie state is written
into a cookie jar file that is later read back and used for subsequent
requests, a malicious HTTP server can inject new cookies for arbitrary
domains into said cookie jar.
Package
| Upstream: | released
(7.51.0)
|
| Ubuntu 16.04 ESM: | released
(7.47.0-1ubuntu2.2)
|
| Ubuntu 14.04 ESM: | released
(7.35.0-1ubuntu2.10)
|
Patches:
Updated: 2022-04-13 12:40:37 UTC (commit f411bd370d482ef4385c4e751d121a4055fbc009)