curl project vulnerabilities

Products

• curl 1

Latest curl project CVEs

Newest publication first

1. CVE-2013-2617 Curl Gem insufficient URL escaping command injection

   Published 2013-03-20

   High·CVSS 7.5 EPSS 4.4% Public exploit PoC

   lib/curl.rb in the Curl Gem for Ruby allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.