Логотип exploitDog
bind:CVE-2023-26130
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-26130

Количество 6

Количество 6

ubuntu логотип

CVE-2023-26130

больше 2 лет назад

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
EPSS: Низкий
redhat логотип

CVE-2023-26130

больше 2 лет назад

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
EPSS: Низкий
nvd логотип

CVE-2023-26130

больше 2 лет назад

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
EPSS: Низкий
debian логотип

CVE-2023-26130

больше 2 лет назад

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerab ...

CVSS3: 7.5
EPSS: Низкий
github логотип

GHSA-599g-p68q-2rxv

больше 2 лет назад

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
EPSS: Низкий
fstec логотип

BDU:2023-03252

больше 2 лет назад

Уязвимость библиотеки cpp-httplib, связанная с неприятием мер по нейтрализации последовательностей CRLF, позволяющая нарушителю внедрить произвольные HTTP-заголовки

CVSS3: 7.5
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
redhat логотип
CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
nvd логотип
CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
debian логотип
CVE-2023-26130

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerab ...

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
github логотип
GHSA-599g-p68q-2rxv

Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors. **Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).

CVSS3: 7.5
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-03252

Уязвимость библиотеки cpp-httplib, связанная с неприятием мер по нейтрализации последовательностей CRLF, позволяющая нарушителю внедрить произвольные HTTP-заголовки

CVSS3: 7.5
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу