CVE-2016-8615
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server…
Published: 2018-08-01 · CVSS: 5.3 · CVSS 3.0
A flaw was found in curl before version 7.51. If cookie state is written into a cookie jar file that is later read back and used for subsequent requests, a malicious HTTP server can inject new cookies for arbitrary domains into said cookie jar.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7