Mmastodon TechnologyCybersecurity first seen 12 d ago, last 12 d ago, peak #6

Moderate curl vulnerability disclosed over HSTS file handling

Original: 🚨 EUVD-2023-50461 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: curl 🏢 Vendor: curl 📅 Published: 2023-12-12 | Updated: 2026-10-

A moderate-severity vulnerability (EUVD-2023-50461, CVSS 5.3) in the curl data-transfer tool has been catalogued. The flaw concerns saving HSTS data to an excessively long file name, which could cause curl to erase the file's contents, leaving later requests without HSTS knowledge. Security trackers and automated feeds circulate the advisory, and administrators of systems relying on curl are advised to check their versions.

Why now: Security feeds are recirculating the advisory following its catalogue update, prompting administrators to verify whether their curl installations are affected.

curlEUVDCVSS

Open on mastodon →

Evidence

• 🚨 EUVD-2023-50461 📊 Score: 5.3/10 (CVSS v3.1) 📦 Product: curl 🏢 Vendor: curl 📅 Published: 2023-12-12 | Updated: 2026-10-15 📝 When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2297904