Cyber Resilience

CVE-2024-11053

Haxx Curl 7.76.0 – 8.11.1

Public PoC
Published
11 December 2024
Modified
03 November 2025
Patch / advisory
View advisory
CVSS Score v3.1 3.4
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
EPSS Score 0.014 70th percentile
Risk Priority 33 floored blend · peak EPSS

Summary

CVE-2024-11053 is a low-severity an unspecified weakness vulnerability in Haxx Curl. Its CVSS base score is 3.4 (Low).

Operationally, ranked in the top 30% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

EU & UK References

Vulnerability Data

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc…

more

file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2025-0167Same product: Haxx Curl
CVE-2024-2379Same product: Haxx Curl
CVE-2025-0665Same product: Haxx Curl
CVE-2024-2398Same product: Haxx Curl
CVE-2024-2466Same product: Haxx Curl
CVE-2024-8096Same product: Haxx Curl
CVE-2024-2004Same product: Haxx Curl
CVE-2023-23915Same product: Haxx Curl
CVE-2023-28320Same product: Haxx Curl
CVE-2023-28319Same product: Haxx Curl

Affected Assets

haxx
curl
7.76.0 — 8.11.1
netapp
ontap
9
netapp
ontap select deploy administration utility
all versions
netapp
h610c firmware
all versions
netapp
h610s firmware
all versions
netapp
h615c firmware
all versions
netapp
h700s firmware
all versions
netapp
bootstrap os
all versions
netapp
h300s firmware
all versions
netapp
h410s firmware
all versions
+1 more product configuration(s) — see NVD for full list

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References