Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2026/06/02 7:08 p.m.51 views

CVE-2026-48598 CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.partheadersfordisposition/1 interpolates each disposition parameter as k="v" with no validation of CR \r, LF \n, o...

2.1CVSS0.00273EPSS
SaveExploits0References4
Rows per page
Query Builder