| Package | Affected versions | Patched versions |
|---|---|---|
| curl | = 7.40.0= 7.41.0= 7.42.0= 7.42.1 | |
| libcurl | = 7.40.0= 7.41.0= 7.42.0= 7.42.1 |
cURL and libcurl 7.40.0 through 7.42.1 send the HTTP Basic authentication credentials for a previous connection when reusing a reset (curl_easy_reset) connection handle to send a request to the same host name, which allows remote attackers to obtain sensitive information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free