CVE-2025-14524
Severity
5.3MEDIUM
EPSS
0.0%
top 92.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJan 8
Latest updateMar 11
Description
When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer
performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP,
POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new
target host.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-g897-jvjx-78vg: When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer
performs a cross-protocol redirect to a second URL that uses an IMAP, L↗2026-01-08
OSV▶
CVE-2025-14524: When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, L↗2026-01-08
📋Vendor Advisories
3🕵️Threat Intelligence
1💬Community
4Bugzilla▶
CVE-2025-14524 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token↗2025-12-31