https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:27:24 +0000 https://vulnerability.circl.lu/vuln/cve-2022-27780 <p><strong>Affected:</strong> https://github.com/curl/curl, haxx curl, netapp solidfire_\&amp;_hci_storage_node, netapp ontap_9, netapp solidfire_\&amp;_hci_management_node, netapp hci_bootstrap_os</p> <p>The curl URL parser wrongly accepts percent-encoded URL separators like &#39;/&#39;when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.</p> <p><strong>Affected:</strong> https://github.com/curl/curl, haxx curl, netapp solidfire_\&amp;_hci_storage_node, netapp ontap_9, netapp solidfire_\&amp;_hci_management_node, netapp hci_bootstrap_os</p> <p>The curl URL parser wrongly accepts percent-encoded URL separators like &#39;/&#39;when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.</p> https://vulnerability.circl.lu/vuln/cve-2022-27780