CVE:CVE-2022-42916
CNNVD:CNNVD-202210-2216
curl是一款用于从服务器传输数据或向服务器传输数据的工具。
curl存在安全漏洞，该漏洞源于HSTS检查可以被绕过以欺骗它继续使用HTTP。
solution:Upgrade haxx curl to a higher version than 7.86.0,and avoid the version [7.77.0,7.86.0); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade apple macos to a higher version than 12.6.3,13.2,and avoid the version (,12.6.3),[13.0,13.2)