| Package | Affected versions | Patched versions |
|---|---|---|
| curl | = 7.31.0= 7.32.0= 7.33.0= 7.34.0= 7.35.0= 7.36.0= 7.37.0≤ 7.37.1 | |
| libcurl | = 7.31.0= 7.32.0= 7.33.0= 7.34.0= 7.35.0= 7.36.0= 7.37.0≤ 7.37.1 |
cURL and libcurl before 7.38.0 allow remote attackers to bypass the Same Origin Policy and set cookies for arbitrary sites by setting a cookie for a top-level domain.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free