Directory Traversal Vulnerability in Curl Command Line Tool
CVE-2025-11563
4.6MEDIUM
What is CVE-2025-11563?
A vulnerability exists in the wcurl command line tool where URLs containing percent-encoded slashes can misdirect the output file to a location outside of the user's designated directory. This can potentially allow unauthorized access to the file system, as files may be written in locations that the user did not intend. Users are advised to exercise caution and validate input URLs to mitigate risks associated with this flaw.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
curl 8.17.0
curl 8.16.0
curl 8.15.0
References
CVSS V3.1
Score:
4.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Stanislav Fort (Aisle Research)
Samuel Henrique
Sergio Durigan Junior
Xi Ruoyao