{"id":"CVE-2026-63481","revision":"40dd682e6131482e829edc82be600673","records":[{"revision":"40dd682e6131482e829edc82be600673","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-63481","aliases":[],"title":"Hurl: Cookies in Cookies section leak when redirecting to a different host","description":"Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/http/client.rs strips Authorization and Cookie headers and basic-auth credentials when a redirect changes host, but it carries RequestSpec.cookies created from the dedicated [Cookies] section into the redirected request. An attacker-controlled redirect can therefore receive authentication or session cookies that should remain scoped to the original host. Cookies supplied through a raw Cookie header are stripped and are not affected by this specific path. This issue is reported as fixed in version 8.1.0.","state":0,"publishedAt":"2026-08-20T16:28:24.282+00:00","modifiedAt":"2026-08-21T21:47:24.233+00:00","affected":[{"ecosystem":"Vendor product","name":"hurl","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Orange-OpenSource\",\n                    \"product\": \"hurl\",\n                    \"versions\": [\n                        {\n                            \"version\": \"<= 8.0.1\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","score":6.9,"severity":"MEDIUM"}],"references":["https://github.com/Orange-OpenSource/hurl/security/advisories/GHSA-7w2g-9mf9-324m","https://github.com/Orange-OpenSource/hurl/pull/5119","https://github.com/Orange-OpenSource/hurl/commit/ed91c894c2cf11704422010554037e3ba70b446e","https://github.com/Orange-OpenSource/hurl/releases/tag/8.0.1"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-63481","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-63481","identifiers":["CVE-2026-63481"]},"retained":false,"historicalAffected":[]}],"coverage":[]}