UpHeron
All vulnerabilities

Servers and applications

CVE-2023-23914

A cleartext transmission of sensitive information vulnerability exists in curl <v7.88.0 that could cause HSTS functionality fail when multiple URLs are requested serially. Using its HSTS support, curl can be instructed to use HTTPS instead of usingan insecure clear-text HTTP step even when HTTP is provided in the URL. ThisHSTS mechanism would however surprisingly be ignored by subsequent…

Severity
Critical 9.1
Published
23 Feb 2023
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
7.88.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.77.0 before 7.88.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-23914
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-23914