Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The redirect implementation in curl and libcurl 5.11 through 7.19.3, when CURLOPT_FOLLOWLOCATION is enabled, accepts arbitrary Location values, which might allow remote HTTP servers to (1) trigger arbitrary requests to intranet servers, (2) read or overwrite arbitrary files via a redirect to a file: URL, or (3) execute arbitrary commands via a redirect to an scp: URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
cURL/libcURL HTTP Location:重新定向绕过安全限制漏洞
Vulnerability Description
cURL是命令行传输文件工具，支持FTP、FTPS、HTTP、HTTPS、GOPHER、TELNET、DICT、FILE和LDAP。 跟随HTTP Location:的cURL会重新定向到scp:或file:// URL，因此如果用户点击了特制的重新定向URL的话(例如libcurl客户端读取RSS源)，恶意的HTTP服务器就可以覆盖或泄露任意本地文件系统的内容，或执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A