CVE-2015-3153

CVE-2015-3153 describes a vulnerability in cURL and libcurl versions prior to 7.42.1, where custom HTTP headers were inadvertently sent to both proxy and destination servers, potentially exposing sensitive information to malicious proxy servers. With a CVSS score of 5.0 (medium), this vulnerability has a network attack vector and low attack complexity, leading to a potential compromise of confidentiality. Despite its age and the risk of information disclosure, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.