CVE-2024-11053
CVE Details
Visit the official vulnerability details page for CVE-2024-11053 to learn more.
Initial Publication
12/11/2024
Last Update
06/17/2026
Third Party Dependency
curl-minimal
NIST CVE Summary
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances.
This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.
CVE Severity
Our Official Summary
Investigation is ongoing to determine how this vulnerability affects our products.
Status
Modified
Affected Products & Versions
| Version | PaletteAI | PaletteAI VerteX |
|---|---|---|
| 1.4.0 | ⚠️ Impacted | ⚠️ Impacted |
| 1.3.2 | ⚠️ Impacted | ⚠️ Impacted |
| 1.2.2 | ⚠️ Impacted | ⚠️ Impacted |
Revision History
No revisions available.