CVE-2024-11053

Summary

CVE-2024-11053 is a vulnerability affecting the curl utility. Under specific conditions, when curl is instructed to use a `.netrc` file for credentials and follow HTTP redirects, the password for the initial host may be inadvertently disclosed to the redirected host. This issue arises when a `.netrc` entry exists for the redirect target with an omitted password or both login and password missing.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.