地图 / CVE-2025-14524

CVE-2025-14524

bearer token leak on cross-protocol redirect

NVD CVSS: —
CWE: —
未来 30 天被利用概率: 0.7%
利用等级: 低概率（<1%）
发布时间: —

关联的公开报告 5 份

Redirect to imap/pop3/smtp (SASL) or sftp/scp (libssh) authenticates to the attacker's host with the user's ambient Kerberos credentialscurl · 低危 · 2026-10-21 Cross-protocol redirect to imap:// or smtp:// uploads the -F/MIMEPOST form and the custom Authorization/Cookie headers to the redirect targetcurl · 低危 · 2026-10-26 CVE-2026-3783: token leak with redirect and netrccurl · 低危 · 2026-03-11 libcurl: Improper Authentication State Management on Cross-Protocol Redirectscurl · 低危 · 2026-01-17 CVE-2025-14524: bearer token leak on cross-protocol redirectcurl · 低危 · 2026-01-07

查看 NVD 详情 ↗