← Database

CVE-2022-35252

LOW CVSS: 3.7 Published: 2022-09-23 Modified: 2026-06-17

Description

When curl is used to retrieve and parse cookies from a HTTP(S) server, itaccepts cookies using control codes that when later are sent back to a HTTPserver might make the server return 400 responses. Effectively allowing a"sister site" to deny service to all siblings.

Affected Platforms

Netapp SolidfireNetapp H410SNetapp Bootstrap OsNetapp Hci Management NodeNetapp H300S FirmwareNetapp Hci Compute NodeNetapp H300SNetapp Clustered Data OntapNetapp Element SoftwareNetapp H700S Firmware

Weakness Type

CWE-20, NVD-CWE-noinfo

References