Outdated IDNA 2003 Standard in Curl Leads to Potential Host Spoofing Vulnerability

Outdated IDNA 2003 Standard in Curl Leads to Potential Host Spoofing Vulnerability

CVE-2016-8625 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

curl before version 7.51.0 uses outdated IDNA 2003 standard to handle International Domain Names and this may lead users to potentially and unknowingly issue network transfer requests to the wrong host.

Learn more about our Network Penetration Testing.