UpHeron
All vulnerabilities

Servers and applications

CVE-2022-22576

An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).

Severity
High 8.1
Published
26 May 2022
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.83.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.33.0 before 7.83.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-22576
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-22576