Files
CVEs-PoC/2020/CVE-2020-8169.md
T
2024-06-18 02:51:15 +02:00

18 lines
701 B
Markdown

### [CVE-2020-8169](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8169)
![](https://img.shields.io/static/v1?label=Product&message=https%3A%2F%2Fgithub.com%2Fcurl%2Fcurl&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Information%20Disclosure%20(CWE-200)&color=brighgreen)
### Description
curl 7.62.0 through 7.70.0 is vulnerable to an information disclosure vulnerability that can lead to a partial password being leaked over the network and to the DNS server(s).
### POC
#### Reference
- https://hackerone.com/reports/874778
#### Github
- https://github.com/docker-library/faq