CVE-2024-0853

CVE-2024-0853 is a medium-severity vulnerability affecting haxx curl, where curl incorrectly cached SSL session IDs even after OCSP stapling verification failed. This allowed subsequent connections to the same hostname to bypass certificate status checks, potentially enabling an attacker to serve an invalid certificate without detection. The vulnerability has a CVSS score of 5.3, indicating a network-based attack with low complexity and a potential impact of low integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, though it has received some community discussion.