{"affected":[{"product":"https://github.com/curl/curl","source":"CNA: hackerone","vendor":"n/a","versions":[{"status":"affected","version":"Fixed in 7.83.1"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]},{"defaultStatus":"unknown","product":"SIPLUS S7-1500 CPU 1518-4 PN/DP MFP","source":"ADP: siemens-SADP","vendor":"Siemens","versions":[{"lessThan":"V3.1.5","status":"affected","version":"V3.1.0","versionType":"custom"}]}],"cveId":"CVE-2022-27779","cwes":["CWE-201"],"description":"libcurl wrongly allows cookies to be set for Top Level Domains (TLDs) if thehost name is provided with a trailing dot.curl can be told to receive and send cookies. curl's \"cookie engine\" can bebuilt with or without [Public Suffix List](https://publicsuffix.org/)awareness. If PSL support not provided, a more rudimentary check exists to atleast prevent cookies from being set on TLDs. This check was broken if thehost name in the URL uses a trailing dot.This can allow arbitrary sites to set cookies that then would get sent to adifferent and unrelated site or domain.","epss":{"date":"2026-11-02","percentile":0.86403,"score":0.02785},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793643989601,"publishedAt":1654041600000,"references":[{"source":"CNA: hackerone","tags":[],"url":"https://hackerone.com/reports/1553301"},{"source":"CNA: hackerone","tags":[],"url":"https://security.netapp.com/advisory/ntap-20220609-0009/"},{"source":"CNA: hackerone","tags":["vendor-advisory"],"url":"https://security.gentoo.org/glsa/202212-01"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://hackerone.com/reports/1553301"},{"source":"ADP: CVE","tags":["x_transferred"],"url":"https://security.netapp.com/advisory/ntap-20220609-0009/"},{"source":"ADP: CVE","tags":["vendor-advisory","x_transferred"],"url":"https://security.gentoo.org/glsa/202212-01"},{"source":"ADP: siemens-SADP","tags":[],"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html"}],"remediation":[],"revision":"b79694a6edb9f218d7daf2eb2e5b24886a0043f875bcede9fe1c02538f4e91e4","sources":[{"modifiedAt":1793643989601,"name":"CNA: hackerone","retrievedAt":1793646513142,"url":"https://www.cve.org/CVERecord?id=CVE-2022-27779"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793646521913,"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-27779"}],"ssvc":{"assessedAt":1793643976968,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"CVE-2022-27779","updatedAt":1793646521913}