{"vulnerability": "CVE-2023-27536", "sightings": [{"uuid": "a8d189bb-b9b8-40d6-a171-9dcc78c5e110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-27536", "type": "seen", "source": "https://t.me/cibsecurity/61208", "content": "\u203c CVE-2023-27536 \u203c\n\nAn authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-31T00:31:48.000000Z"}, {"uuid": "1a84b939-e1c5-4d8e-8fbc-fb46672cdc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-27536", "type": "seen", "source": "https://t.me/ctinow/100330", "content": "Internet Bug Bounty: CVE-2023-27536: GSS delegation too eager connection re-use\n\nhttps://ift.tt/H0N1JG8", "creation_timestamp": "2023-03-20T23:31:54.000000Z"}, {"uuid": "79e1567e-b783-4690-81ff-8865ee1bcb33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-27536", "type": "seen", "source": "https://t.me/ctinow/100871", "content": "curl: CVE-2023-27536: GSS delegation too eager connection re-use\n\nhttps://ift.tt/zCSUJk7", "creation_timestamp": "2023-03-22T22:31:32.000000Z"}]}