CVE-2022-35252
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make t…
Published Sep 23, 2022 · updated Oct 14, 2026 · haxx curl
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
Timeline
Detection, updates, and resolution for this record.
Sep 23, 2022 · NIST NVD
Detected
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
Oct 14, 2026 · NIST NVD
Updated
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
Affected
- cpe apple/macosversion unspecified
- cpe debian/debian linux10.0
- cpe haxx/curlversion unspecified
- cpe netapp/bootstrap osversion unspecified
- cpe netapp/clustered data ontapversion unspecified
- cpe netapp/element softwareversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h410s firmwareversion unspecified
- cpe netapp/h500s firmwareversion unspecified
- cpe netapp/h700s firmwareversion unspecified
- cpe netapp/hci management nodeversion unspecified
- cpe netapp/solidfireversion unspecified
Sources
- CVE.orgCVE-2022-35252
Official CVE identifier
cve.org - NIST NVDCVE-2022-35252
When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
nvd.nist.gov