Skip to content
OpenAdvisories
Unscored DSA-2660-1 1 CVE

curl - cookie leak vulnerability

Published Apr 20, 2013 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 curl 7.21.0-2.1+squeeze3

Vulnerabilities 1

  • Unscored —

    The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sendi…