CVEs-PoC/2025/CVE-2025-0167.md

CVE-2025-0167

Description

When asked to use a .netrc file for credentials and to follow HTTPredirects, curl could leak the password used for the first host to thefollowed-to host under certain circumstances.This flaw only manifests itself if the netrc file has a default entry thatomits both login and password. A rare circumstance.

POC

Reference

No PoCs from references.

Github

• https://github.com/adegoodyer/kubernetes-admin-toolkit
• https://github.com/bahe-msft/oval-package-parser