CVE-2023-32762
MEDIUM5.3EPSS 0.14%發布日:2023/5/28修改日:2026/4/28
描述
An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.
受影響套件(2)
- Debian/qt6-basefrom 0, < 6.4.2+dfsg-9
- Debian/qtbase-opensource-srcfrom 0, < 5.15.2+dfsg-9+deb11u1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | MEDIUM5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |