Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-65rj-829h-6g8x

Опубликовано: 04 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 5.3

Описание

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

EPSS

Процентиль: 37%
0.00159
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-113

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 1 года назад

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

CVSS3: 5.3
nvd
около 1 года назад

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

CVSS3: 5.3
debian
около 1 года назад

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF chara ...

EPSS

Процентиль: 37%
0.00159
Низкий

6.9 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-113