A vulnerability, which was classified as problematic, was found in cURL up to 8.4.0. This affects an unknown part in the library lib/fopen.c of the component HSTS File Name Handler. The manipulation leads to missing encryption of sensitive data.

This vulnerability is uniquely identified as CVE-2023-46219. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.