vulnerability

F5: CVE-2020-8284: K63525058: cURL vulnerability CVE-2020-8284

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:N/A:N)

Published

Feb 19, 2021

Added

Jun 17, 2026

Modified

Jun 17, 2026

Description

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service banner extractions.

Solution

f5-bigip-upgrade-latest

References

CVE-2020-8284
https://attackerkb.com/topics/CVE-2020-8284
https://my.f5.com/manage/s/article/K63525058
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29152
CWE-200
EUVD-EUVD-2020-29152

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report