$ cve CVE-2018-1000007 JSON

CVE-2018-1000007

9.8

CRITICAL · CVSS 3.1 · EPSS 8% (pctl 95)

In your normal cycle

Critical by CVSS (9.8), but no sign of active exploitation.

Description

libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom headers in its HTTP requests, libcurl will send that set of headers first to the host in the initial URL but also, if asked to follow redirects and a 30X HTTP response code is returned, to the host mentioned in URL in the `Location:` response header value. Sending the same set of headers to subsequent hosts is in particular a problem for applications that pass on custom `Authorization:` headers, as this header often contains privacy sensitive information or data that could allow others to impersonate the libcurl-using client's request.

Scoring

CVSS	9.8 (CRITICAL, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS	8.03% — more likely to be exploited than 95% of all CVEs
On CISA KEV	no
Public exploit	none known
Published	2018-01-24
Last modified	2026-06-17

Affected (20)

Vendor	Product
canonical	ubuntu linux
debian	debian linux
fujitsu	m10-1
fujitsu	m10-1 firmware
fujitsu	m10-4
fujitsu	m10-4 firmware
fujitsu	m10-4s
fujitsu	m10-4s firmware
fujitsu	m12-1
fujitsu	m12-1 firmware
fujitsu	m12-2
fujitsu	m12-2 firmware
fujitsu	m12-2s
fujitsu	m12-2s firmware
haxx	curl
redhat	enterprise linux desktop
redhat	enterprise linux server
redhat	enterprise linux server aus
redhat	enterprise linux server eus
redhat	enterprise linux workstation

References

→ the Explorer · watch your stack · NVD