description: A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
problem types: Insufficiently Protected Credentials (CWE-522)
affected:
{
vendor: n/a
product: https://github.com/curl/curl
versions:
version: fixed in curl 7.83.0, status: affected
}