Exploit for Improper Certificate Validation in Haxx Curl

CVE-2025-5025

githubexploit · 2025-07-22

Description

CVE-2025-5025 mô tả lỗ hổng xác thực chứng chỉ không đúng trong curl của Haxx.

Affected Haxx Curl versions

Haxx Curl< 8.14.0

All known vulnerabilities by product

Astra Linux Suse Libcurl

CVSS 4.8 for CVE-2025-5025

4.8

MEDIUM SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector:NETWORK

Attack Complexity:HIGH

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:LOW

Integrity:LOW

Availability:NONE

Working code

20%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

0.3%higher than 21.4% of all CVEs

Updated 2026-08-30

Exploit Details

Modified:2025-07-22 04:12

Last Seen:2025-08-29 10:50

Reporter:KiPhuong

Written in:Dockerfile

Last commit:2025-07-22

Other exploits for CVE-2025-5025

cve-2025-5025

2026-08-29 KitPloitKITPLOIT

Exploit Code

README5 lines

## https://sploitus.com/exploit?id=EB238B94-1766-57B9-A3DB-1DC524FC9D3B
# cve-2025-5025
Report in https://www.notion.so/PoC-CVE-2025-5025-233f40a863f88009b35ae8ba86f7a50f?source=copy_link with vietnamese

Comment to give your opinion

Exploit Code

Share

Share on social media: