Absolute path traversal vulnerability in curl 7.20.0 up to and including 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
curl curl 7.20.0 |
||
curl curl 7.21.1 |
||
curl curl 7.20.1 |
Vulmon