Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mpq7-xv6q-mqgh

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

CRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URI.

CRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URI.

EPSS

Процентиль: 59%
0.00386
Низкий

3.7 Low

CVSS3

Связанные уязвимости

CVSS3: 3.7
nvd
около 10 лет назад

CRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URI.

CVSS3: 3.7
debian
около 10 лет назад

CRLF injection vulnerability in the on_req function in lib/handler/red ...

EPSS

Процентиль: 59%
0.00386
Низкий

3.7 Low

CVSS3