PT-2026-1657
CVE-2025-14524
·
Published
2025-01-01
·
Updated
2026-09-15
Description by
CVSS 2.0
5.4
MediumMetricsAV:N/AC:H/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions
curl (affected versions not specified)
Description
A bearer token leak occurs on a cross-protocol redirect. The issue involves curl and potentially allows unauthorized access due to the leakage of sensitive authentication tokens.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾