CVE-2022-27780

CVE Information
CVE ID
CVE-2022-27780
Severity
HIGH CVSS 7.5
Publish Date
2022-06-02
Description

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.

Collection Date
2026-01-13
Impact Summary
Affected Hosts 1
Related Incidents 0
Related Alerts 0
Affected Hosts (1)
Hostname OS Type Severity Total CVEs
in-bridge-40 LINUX CRITICAL 392