UpHeron
All vulnerabilities

Servers and applications

CVE-2015-3153

The default configuration for cURL and libcurl before 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.

Severity
Medium 5.0
Published
1 May 2015
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • Every version up to 7.42.0
curlServers and applications · cpe:a:haxx:libcurl
  • Every version up to 7.42.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2015-3153
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2015-3153