6.5 Medium

CVE-2023-46218 This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than…

Description

This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise allowed or possible. This allows a site to set cookies that then would get sent to different and unrelated sites and domains. It could do this by exploiting a mixed case flaw in curl's function that verifies a given cookie domain against the Public Suffix List (PSL). For example a cookie could be set with `domain=co.UK` when the URL used a lower case hostname `curl.co.uk`, even though `co.uk` is listed as a PSL domain.

Affected products and versions

Product	Affected versions	Fixed in
curl	8.4.0	No fix stated
curl 7.46	earliest → < 7.46.0	7.46.0
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.5 → latest	No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1	3.1.5 → latest	No fix stated
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1	3.1.5 → latest	No fix stated
RUGGEDCOM ROX MX5000 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX MX5000RE 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1400 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1500 2.17	earliest → < 2.17.0	2.17.0

Show the 8 other branches

Product	Affected versions	Fixed in
RUGGEDCOM ROX RX1501 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1510 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1511 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1512 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1524 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX1536 2.17	earliest → < 2.17.0	2.17.0
RUGGEDCOM ROX RX5000 2.17	earliest → < 2.17.0	2.17.0
SINEC NMS	Versions not published