Mmastodon TechnologyCybersecurity first seen 11 d ago, last 11 d ago, peak #5

curl vulnerability lets malicious servers set super cookies

Original: 🚨 EUVD-2023-50460 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: curl 🏢 Vendor: curl 📅 Published: 2023-12-07 | Updated: 2026-10-

A medium-severity flaw in curl, tracked as EUVD-2023-50460 and scored 6.5 out of 10 under CVSS v3.1, was published in the EU vulnerability database. The bug allows a malicious HTTP server to set 'super cookies' in curl, which are then sent back to more origins than the tool's rules normally permit, undermining cookie-scoping protections. Security watchers are sharing the advisory as curl maintains its long record of cookie-handling fixes.

Why now: A newly highlighted medium-severity curl advisory concerning cookie-scoping is circulating among security watchers.

curlEU Vulnerability DatabaseCVSS

Open on mastodon →

Evidence

• 🚨 EUVD-2023-50460 📊 Score: 6.5/10 (CVSS v3.1) 📦 Product: curl 🏢 Vendor: curl 📅 Published: 2023-12-07 | Updated: 2026-10-15 📝 This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2297903