Aller au contenu
Se connecter
5.4 Moyenne

CVE-2023-26148 All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set…

Description

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.

Produits et versions touchés

Produit Versions touchées Corrigé en
ithewei/libhv Versions non publiées

Autres CVE de ithewei/libhv

Les 3 CVE de ithewei/libhv →
CVE-2023-26147 All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to… 5.3 Moyenne CVE-2023-26146 All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name… 6.1 Moyenne
Suivre cette CVE