When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2022-09-23T00:00:00

Updated: 2024-08-03T09:29:17.455Z

Reserved: 2022-07-06T00:00:00

Link: CVE-2022-35252

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-23T14:15:12.323

Modified: 2024-11-21T07:10:58.650

Link: CVE-2022-35252

cve-icon Redhat

Severity : Low

Publid Date: 2022-08-31T00:00:00Z

Links: CVE-2022-35252 - Bugzilla