Curl 8.5.0 < 8.6.0 Security Bypass (CVE-2024-0853)

Language:

Version 1.5 Apr 19, 2024, 9:35 PM Plugin metadata (Removed 'Windows' from plugin name) Plugin Feed: 202404192135
Version 1.4 Mar 29, 2024, 11:43 AM IAVM reference Plugin Feed: 202403291143
Version 1.3 Mar 14, 2024, 1:25 PM Plugin categorization (Enabled to run on Nessus Agents) Plugin Feed: 202403141325
Version 1.2 Feb 13, 2024, 5:46 PM CVSS metrics ("CVSSv2 score" set to 5.0. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N". "CVSSv3 score" set to 5.3) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") CVSSv3 severity (based on None, severity increased from "Low" to "Medium") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202402131746
Version 1.1 Feb 2, 2024, 3:59 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") Exploit attributes ("Exploit available" set to "False". "Exploitability ease" set to "No known exploits are available") Plugin Feed: 202402021559
Version 1.0 Feb 2, 2024, 10:24 AM New Plugin Feed: 202402021024

* Changelogs are generally available for changes made after Nov 1, 2022