Servers and applications
CVE-2022-35252
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
- Severity
- Low 3.7
- Published
- 23 Sept 2022
- Last changed
- 14 Oct 2026
- Added to UpHeron
- 21 Oct 2026
- Fixed in
- 7.85.0
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
curlServers and applications · cpe:a:haxx:curl |
|