Total vulnerabilities in the database
Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.
| Software | From | Fixed in |
|---|---|---|
| curl / curl | 7.20.1 | 7.20.1.x |
| curl / curl | 7.20.0 | 7.20.0.x |
| curl / curl | 7.21.1 | 7.21.1.x |