CVE-2015-3145
CVSS Score Not Available
67.99%
MEDIUM RiskEPSS (99th percentile)
The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via a cookie path containing only a double-quote character.
Published: 4/24/2015
Modified: 4/12/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
67.99%MEDIUM Exploitation Risk
99th percentile
This vulnerability has a 67.99% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.