PT-2026-113751 · Libcurl+1 · Libcurl+1
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
libcurl versions prior to 8.23.0-1.1
Description
libcurl may accidentally return a URL containing credentials when the
CURLINFO EFFECTIVE URL option is used with the curl easy getinfo() function, even if the original URL or the redirected URL did not contain them. This occurs when curl retrieves credentials from a .netrc file. The curl command line tool is also affected via the --write-out '%{url effective}' option.Recommendations
Update libcurl to version 8.23.0-1.1.
Insufficiently Protected Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Curl
Libcurl