A insufficiently protected credentials vulnerability in fixed in curl 7.83.0 might leak authentication or cookie header data on HTTP redirects to the same host but another port number.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/fokypoky/places-list