description: When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.
problem types: Improper Input Validation (CWE-20)
affected:
{
vendor: n/a
product: https://github.com/curl/curl
versions:
version: Fixed in curl 7.85.0, status: affected
}