curl / Docs / Vulnerability table / 4.1 vulnerabilities

Vulnerabilities in curl 4.1

curl version 4.1 was released on April 3 1998. The following 3 security problems are known to exist in this version.

FlawFrom versionTo and includingCVECWE
trusting FTP PASV responses4.07.73.0CVE-2020-8284CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
sensitive HTTP server headers also sent to proxies4.07.42.0CVE-2015-3153CWE-201: Information Exposure Through Sent Data
cookie leak with IP address as domain4.07.37.1CVE-2014-3613CWE-201: Information Exposure Through Sent Data

Changelog for curl 4.1

See vulnerability summary for the previous release: 4.0 or the subsequent release: 4.2