# What is CVE-2023-28321? > CVE-2023-28321 is a medium-severity flaw (CVSS 5.9) in Curl from Haxx, published on 26 May 2023. It is not on the list of flaws known to be exploited today. The latest forecast puts its chance of use in the next 30 days at 1.8%. If you run an affected version, plan in the vendor’s fix. Canonical page: https://www.precursorintelligence.com/what-is/cve-2023-28321 ## At a glance - **Verdict:** Plan it in. No sign of exploitation and a low forecast. Patch it in your normal update cycle. - **Precursor Intelligence risk score:** 44 out of 100 (Medium); action: Plan remediation. Kept up to date as the evidence changes. - **Severity:** Medium (CVSS 5.9 out of 10) - **Known to be exploited:** No, not on the list of flaws known to be exploited today - **Chance of use in the next 30 days:** 1.8% (latest exploit-likelihood forecast) - **Published:** 26 May 2023 - **Record last updated:** 15 January 2025 - **Main product:** Curl from Haxx - **Affected products:** 14 ## What is CVE-2023-28321? In plain terms It can be attacked from anywhere on the internet without logging in, and nobody has to click anything. If it works, the attacker can change data. ### The official description An improper certificate validation vulnerability exists in curl