CVE-2022-27780: NetApp The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like ` would be allowed bythe parser and get transposed into `
This NetApp advisory covers CVE-2022-27780 in solidfire_\&_hci_storage_node, ontap_9 and solidfire_\&_hci_management_node.
- CVE-2022-27780
Key facts
- CISA KEV
- Not listed (catalogue checked )
- Affected
- https://github.com/curl/curl Fixed in 7.83.1
- Source published
- Source revised
- Listed by VulniPulse
Compiled by VulniPulse from the linked sources. How records are collected and checked.
Affected products & platforms
Description
The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved. For example, a URL like `, would be allowed bythe parser and get transposed into `.
This flawcan be used to circumvent filters, checks and more.
Affected products named by the advisory: solidfire_\&_hci_storage_node; ontap_9; solidfire_\&_hci_management_node.
Text from the source record.
- https://github.com/curl/curl Fixed in 7.83.1
Official advisory · medium-confidence parse· fetched ·verify at source
More NetApp advisories
CVE-2026-114583Nov 6, 2026CPython Vulnerability in NetApp ProductsCVE-2026-72493Nov 6, 2026Linux Kernel Vulnerability in NetApp ProductsCVE-2026-101308Nov 6, 2026FreeBSD Vulnerability in NetApp ProductsCVE-2026-111943Nov 6, 2026Golang Vulnerability in NetApp ProductsCVE-2026-101307Nov 6, 2026FreeBSD Vulnerability in NetApp ProductsCVE-2026-100075Nov 6, 2026Linux Kernel Vulnerability in NetApp Products
Get an email when NetApp SolidFire / Element / HCI publishes the next one.
See NetApp SolidFire / Element / HCI's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).
iPhone and Android apps · New on the App Store
Monitor future NetApp CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
