Vulnerabilities > CVE-2022-35252

047910
CVSS 3.7 - LOW
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
network
high complexity
haxx
netapp
apple
debian
splunk

Summary

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

Vulnerable Configurations

Part Description Count
Application
Haxx
184
Application
Netapp
4
Application
Splunk
13
OS
Netapp
5
OS
Apple
32
OS
Debian
1
Hardware
Netapp
5