What’s Vulnerable › Vulnerabilities

CVE-2024-11053: netrc and redirect credential leak

• Severity: low (CVSS 3.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-12-11 · updated 2026-10-15

Description

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, curl could leak the password used for the first host to the followed-to host under certain circumstances. This flaw only manifests itself if the netrc file has an entry that matches the redirect target hostname but the entry either omits just the password or omits both login and password.

Affected products

• curl: from 7.76.0 before 8.11.1 — fixed in 8.11.1
• NetApp Bootstrap Os: all versions
• NetApp H300S Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H610C Firmware: all versions
• NetApp H610S Firmware: all versions
• NetApp H615C Firmware: all versions
• NetApp H700S Firmware: all versions
• NetApp ONTAP 9: 9
• NetApp ONTAP Select Deploy administration utility: all versions

How to fix

Upgrade to a fixed version: curl 8.11.1. Check the vendor advisory for mitigations.

References

• https://curl.se/docs/CVE-2024-11053.html
• https://curl.se/docs/CVE-2024-11053.json
• https://hackerone.com/reports/2829063
• http://www.openwall.com/lists/oss-security/2024/12/11/1
• https://security.netapp.com/advisory/ntap-20250124-0012/
• https://security.netapp.com/advisory/ntap-20250131-0003/
• https://security.netapp.com/advisory/ntap-20250131-0004/
• https://cert-portal.siemens.com/productcert/html/ssa-089022.html
• https://cert-portal.siemens.com/productcert/html/ssa-212953.html
• https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Get alerted when CVE-2024-11053 or the next vulnerability affects your stack