CVE-2025-53007

🗓️ 26 Jun 2025 14:45:40Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 35 Views

Arduino esp32 prior to version 3.3.0-RC1 has a HTTP Response Splitting vulnerability affecting headers.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-53007	26 Jun 202514:51	–	circl
CNNVD	arduino-esp32 注入漏洞	26 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-53007 arduino-esp32 vulnerable to CRLF injection in WebServer.cpp	26 Jun 202514:45	–	cvelist
EUVD	EUVD-2025-19198	3 Oct 202520:07	–	euvd
NVD	CVE-2025-53007	26 Jun 202515:15	–	nvd
Positive Technologies	PT-2025-26980 · Arduino · Arduino-Esp32	26 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-53007	28 Jun 202515:17	–	redhatcve
Vulnrichment	CVE-2025-53007 arduino-esp32 vulnerable to CRLF injection in WebServer.cpp	26 Jun 202514:45	–	vulnrichment

Vulners

Node

espressif arduino-esp32Range<3.2.1

espressif arduino-esp32Range3.3.0-alpha1–3.3.0-RC1

[
  {
    "vendor": "espressif",
    "product": "arduino-esp32",
    "versions": [
      {
        "version": "< 3.2.1",
        "status": "affected"
      },
      {
        "version": ">= 3.3.0-alpha1, < 3.3.0-RC1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/espressif/arduino-esp32/blob/9e61fa7e4bce59c05cb17c15b11b53b9bafca077/libraries/WebServer/src/WebServer.cpp
github	www.github.com/espressif/arduino-esp32/commit/21640ac82a1bb5efa8cf0b3841be1ac80add6785
github	www.github.com/espressif/arduino-esp32/security/advisories/GHSA-5476-9jjq-563m
github	www.github.com/espressif/arduino-esp32/blob/9e61fa7e4bce59c05cb17c15b11b53b9bafca077/libraries/WebServer/src/WebServer.cpp

17 Jun 2026 09:37Current

7.2High risk

Vulners AI Score7.2

CVSS 49.3

EPSS0.00396

SSVC

CWE-113