Description (CNA)
A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload. On the next invocation using the same path for `--cookie` and `--cookie-jar`, curl fails before connecting, then the cleanup procedure replaces the jar with an empty file, deleting cookies for unrelated domains.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| curl / curl | affected 8.22.0 through 8.22.0; affected 8.21.0 through 8.21.0; affected 8.20.0 through 8.20.0; affected 8.19.0 through 8.19.0; affected 8.18.0 through 8.18.0 |
CWE
No CWE identifiers supplied.