cve/2020/CVE-2020-8286.md

CVE-2020-8286

Description

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response.

POC

Reference

• https://hackerone.com/reports/1048457
• https://www.oracle.com//security-alerts/cpujul2021.html
• https://www.oracle.com/security-alerts/cpuApr2021.html
• https://www.oracle.com/security-alerts/cpuapr2022.html

Github

• https://github.com/YaleSpinup/ecr-api
• https://github.com/salrashid123/envoy_mtls