Lucene search
GitHub Advisory DatabaseGHSA-JWPW-Q68H-R678HistoryMay 24, 2022 - 5:47 p.m.
Duplicate Advisory: Improper Neutralization of CRLF Sequences in dio
2022-05-2417:47:44
CWE-74
CWE-88
CWE-93
GitHub Advisory Database
github.com
13
Duplicate advisory
This advisory has been withdrawn because it is a duplicate of GHSA-9324-jv53-9cc8. This link is maintained to preserve external references.
Original Description
The dio package prior to 5.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a different vulnerability than CVE-2020-35669.
Related
osv
osv
CVE-2020-35669
2020-12-24 03:15:12
Improper Neutralization of CRLF Sequences in dio
2022-05-24 17:47:44
http before 0.13.3 vulnerable to header injection
2022-05-24 17:37:16
github
github
http before 0.13.3 vulnerable to header injection
2022-05-24 17:37:16
dio vulnerable to CRLF injection with HTTP method string
2023-03-21 22:41:11
prion
prion
Crlf injection
2020-12-24 03:15:00
Crlf injection
2021-04-15 19:15:00
cve
cve
CVE-2020-35669
2020-12-24 03:15:00
CVE-2021-31402
2021-04-15 19:15:00
Related for GHSA-JWPW-Q68H-R678