All vulnerabilities

Servers and applications

CVE-2023-27533

A vulnerability in input validation exists in curl <8.0 during communication using the TELNET protocol may allow an attacker to pass on maliciously crafted user name and "telnet options" during server negotiation. The lack of proper input scrubbing allows an attacker to send content or perform option negotiation without the application's intent. This vulnerability could be exploited if an…

Severity
High 8.8
Published
30 Mar 2023
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.0.0 up to 7.881

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-27533
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-27533