Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/http/client.rs strips Authorization and Cookie headers and basic-auth credentials when a redirect changes host, but it carries RequestSpec.cookies created from the dedicated [Cookies] section into the redirected request. An attacker-controlled redirect can therefore receive authentication or session cookies that should remain scoped to the original host. Cookies supplied through a raw Cookie header are stripped and are not affected by this specific path. This issue is reported as fixed in version 8.1.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-20 | 2 | Disclosure2 |
| 2026-09-03 | 1 | Disclosure1 |
CVE-2026-63481 Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/ht… https://www.cve.org/CVERecord?id=CVE-2026-63481
Post summary
CVE-2026-63481 is a redirect handling vulnerability in Hurl 8.0.1 and earlier; the post references the CVE and its technical nature but provides no PoC, exploit code, or patch information.
🟠 Hurl, Credential Leak via Redirect, #CVE-2026-63481 (Medium) -DC-Sep2026-2140 https://dailycve.com/hurl-credential-leak-via-redirect-cve-2026-63481-medium-dc-sep2026-2140/
Post summary
The post announces CVE-2026-63481, a medium‑severity vulnerability that results in credential leaks through redirects, but offers no PoC, exploit code, patch, or evidence of active exploitation.
🚨*CVE* CVE-2026-63481 Hurl is a command line tool that runs and tests HTTP requests defined in plain text files. In version 8.0.1 and earlier, the redirect handling in packages/hurl/src/ht… https://www.cve.org/CVERecord?id=CVE-2026-63481 ----- Traducción: CVE-2026-63481 Hur… https://infoflow.cloud`
Post summary
The text provides a brief disclosure about CVE-2026-63481, mentioning the affected tool and a link to the official CVE record, without offering exploit details or patch information.