AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2022-35252

LOW · CVSS 3.7 EPSS 1.91%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-23 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 3.7. See the original NVD description below for full technical details.

CVE
CVE-2022-35252
Severity
LOW
CVSS
3.7
EPSS
1.91%

Original NVD Description

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

Related CVEs

Other vulnerabilities affecting the same vendor(s)