PatchTheCVEcurlrequest vulnerabilities and fixes
Recent CVEs affecting curlrequest, with upgrade or downgrade steps. 1 tracked.
curlrequest has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-05-07. Highest priority: CVE-2020-7646 (score 64/100).
- CVE-2020-7646 CRITICAL 9.8 UPGRADE curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input.
FAQ
How do I fix curlrequest vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is curlrequest being exploited right now?
None of the tracked curlrequest CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which curlrequest CVE should I patch first?
CVE-2020-7646 currently ranks highest (64/100): curlrequest through 1.0.1 allows reading any file by populating the file parameter with user input..