Approved changes feed: RSS · Atom

cpe:2.3:a:haxx:curl:6.3:*:*:*:*:*:*:*

part: a version: 6.3 update: *

VendorHaxx (d671a1c6-5c93-5e0c-94d0-7f7092cb4b41)
ProductCurl (2d1ca0dd-2ad5-581e-9bc3-c802b3d3d143)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/curl purl2cpe 2026-06-01 10:12:19.108685
pkg:deb/ubuntu/curl purl2cpe 2026-06-01 10:12:19.108686
pkg:github/curl/curl purl2cpe 2026-06-01 10:12:19.108688
pkg:rpm/fedora/curl purl2cpe 2026-06-01 10:12:19.108689
pkg:rpm/opensuse/curl purl2cpe 2026-06-01 10:12:19.108690

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-1944 vulnerable 2026-06-08 05:03:57.439791 Details available
The tailMatch function in cookie.c in cURL and libcurl before 7.30.0 does not properly match the path domain when sending cookies, which allows remote attackers to steal cookies via a matching suffix in the domain of a URL.
Published: 2013-04-29T22:00:00.000Z
Updated: 2024-08-06T15:20:37.296Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.