CVE-2022-27778

State: Published
Severity: Not scored
Published: Jun 1, 2022
Updated: Oct 14, 2026
Reserved: Mar 23, 2022

Description

A use of incorrectly resolved name vulnerability fixed in 7.83.1 might remove the wrong file when `--no-clobber` is used together with `--remove-on-error`.

Scores

The record has no CVSS score.

Weaknesses

CWE-706 Use of Incorrectly-Resolved Name or Reference (CWE-706)

Affected Products

Product	Versions
https://github.com/curl/curln/a	fixed in 7.83.1Affected

References

https://hackerone.com/reports/1553598
https://www.oracle.com/security-alerts/cpujul2022.html
https://security.netapp.com/advisory/ntap-20220609-0009/
https://security.netapp.com/advisory/ntap-20220729-0004/
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.