UpHeron
All vulnerabilities

Servers and applications

CVE-2023-27536

An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive…

Severity
Medium 5.9
Published
30 Mar 2023
Last changed
23 Oct 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:libcurl
  • From 7.22.0 up to 7.88.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-27536
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-27536