UpHeron
All vulnerabilities

Servers and applications

CVE-2023-46219

When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file unaware of the HSTS status they should otherwise use.

Severity
Medium 5.3
Published
12 Dec 2023
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.5.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.84.0 before 8.5.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-46219
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-46219