CVE-2022-27780

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.com%2F127.0.0.1/`, would be allowed bythe parser and get transposed into `http://example.com/127.0.0.1/`. This flawcan be used to circumvent filters, checks and more.

• Haxx Curl

  APP
  Haxx
  7.80.0 – 7.83.1 (excl.)

• Netapp Clustered Data Ontap

  APP
  Netapp
  all versions

• Netapp H300s

  HW
  Netapp
  all versions

• Netapp H300s Firmware

  OS
  Netapp
  all versions

• Netapp H410s

  HW
  Netapp
  all versions

• Netapp H410s Firmware

  OS
  Netapp
  all versions

• Netapp H500s

  HW
  Netapp
  all versions

• Netapp H500s Firmware

  OS
  Netapp
  all versions

• Netapp H700s

  HW
  Netapp
  all versions

• Netapp H700s Firmware

  OS
  Netapp
  all versions

• Netapp Hci Bootstrap Os

  OS
  Netapp
  all versions

• Netapp Hci Compute Node

  HW
  Netapp
  all versions

• Netapp Solidfire\, Enterprise Sds \& Hci Storage Node

  APP
  Netapp
  all versions

• Netapp Solidfire \& Hci Management Node

  APP
  Netapp
  all versions

• Splunk Universal Forwarder

  APP
  Splunk
  9.1.08.2.0 – 8.2.12 (excl.)9.0.0 – 9.0.6 (excl.)