Approved changes feed: RSS · Atom

cpe:2.3:a:haxx:curl:7.2:*:*:*:*:*:*:*

part: a version: 7.2 update: *

VendorHaxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41)
ProductCurl (2d1ca0dd-2ad5-581e-9bc3-c802b3d3d143)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/curl purl2cpe 2026-06-01 10:12:19.109050
pkg:deb/ubuntu/curl purl2cpe 2026-06-01 10:12:19.109051
pkg:github/curl/curl purl2cpe 2026-06-01 10:12:19.109053
pkg:rpm/fedora/curl purl2cpe 2026-06-01 10:12:19.109054
pkg:rpm/opensuse/curl purl2cpe 2026-06-01 10:12:19.109055

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1944 vulnerable 2026-06-08 05:03:57.443950 Details available
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Published: 2013-04-29T22:00:00.000Z
Updated: 2024-08-06T15:20:37.296Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.