CVE-2014-3613

MEDIUM · CVSS 5 EPSS 7.43%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-11-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2014-3613

Severity

MEDIUM

CVSS

EPSS

7.43%

Original NVD Description

cURL and libcurl before 7.38.0 does not properly handle IP addresses in cookie domain names, which allows remote attackers to set cookies for or send arbitrary cookies to certain sites, as demonstrated by a site at 192.168.0.1 setting cookies for a site at 127.168.0.1.