← Back

CVE-2023-32762

nvd nist
Published: May 28, 2023Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

An issue was discovered in Qt before 5.15.14, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1. Qt Network incorrectly parses the strict-transport-security (HSTS) header, allowing unencrypted connections to be established, even when explicitly prohibited by the server. This happens if the case used for this header does not exactly match.

Affected (4)

Products: Debian: Debian Linux · Qt: Qt
1 product
Debian Linux
1 product
Qt
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 10.0
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Qt
From 5.9.0 to 5.15.14
From 6.0.0 to 6.2.9
From 6.3.0 to 6.5.1

References (8)

Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListPatch

Timeline

No history available yet.