Lucene search
+L

22999 matches found

OSV
OSV
added yesterday2 views

GHSA-M8RV-5G2X-5CG5 undici vulnerable to CRLF Injection via blob-like body 'type' property

Impact When an application passes a duck-typed blob-like body to undici's HTTP/1.1 dispatcher via request, stream, pipeline, or dispatch with a .type derived from untrusted input, an attacker can inject CRLF sequences \r\n to append arbitrary HTTP headers and potentially smuggle a second request...

4.2CVSS7.3AI score0.00142EPSS
SaveExploits0References10
Rows per page
Query Builder