CVE-2023-32762
An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.
- Debian Debian Linux
- = 10.0
- Fix
- Available
- CVSS 3.1
- 5.3 MEDIUM
- EPSS
- 0.9% (55th percentile)
- NVD status
- Analyzed
- Published
- 2023-05-28
CVE-2023-32762 at NVD
No indexed exploits for CVE-2023-32762 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2023-32762 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.