File Name Vulnerability in Curl Affects Multiple Platforms

CVE-2023-46219

What is CVE-2023-46219?

A vulnerability found in Curl involves the handling of HSTS (HTTP Strict Transport Security) data, which can be compromised when excessively long file names are used. This flaw allows Curl to mistakenly erase all content stored in the related HSTS file. As a result, any subsequent requests referencing the modified file will operate without the intended HSTS status, potentially exposing users to security risks and undermining the protections provided by HSTS.

References