Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qfcm-r8pp-mrfm

Опубликовано: 29 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.

EPSS

Процентиль: 32%
0.00125
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-74
CWE-93

Связанные уязвимости

CVSS3: 5.4
nvd
больше 2 лет назад

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.

EPSS

Процентиль: 32%
0.00125
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-74
CWE-93