CVE-2023-26148

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n carriage return line feeds characters and inject additional headers in the request sent...

CVE-2023-26148

CVE-2023-26148 affects the ithewei/libhv package. All versions are reported vulnerable to CRLF Injection when untrusted input is used to set HTTP request headers, allowing an attacker to inject additional headers by inserting CRLF characters. The CVE is corroborated across multiple sources (NVD, ...

CVE-2023-26146

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting XSS such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without proper sanitization when it is rendered...

libhv Cross-Site Scripting Vulnerability

libhv is ithewei open source an easier to use than libevent/libuv/asio network library . libhv cross-site scripting vulnerability , the vulnerability stems from the susceptibility to HTTP response splitting , leading to potential cross-site scripting XSS vulnerabilities...

libhv Cross-Site Scripting Vulnerability

libhv is ithewei open source than libevent/libuv/asio easier to use network library . libhv cross-site scripting vulnerability , the vulnerability stems from the vulnerability to cross-site scripting XSS attacks...

libhv Injection Vulnerability

libhv is ithewei open source an easier to use than libevent/libuv/asio network library . libhv injection vulnerability , the vulnerability stems from when the use of untrusted user input to set the request header , vulnerable to CRLF injection attacks...

PT-2023-20526 · Unknown · Ithewei/Libhv

Name of the Vulnerable Software and Affected Versions: ithewei/libhv versions all Description: The issue affects the ithewei/libhv package, where untrusted user input used to set request headers can lead to CRLF Injection. An attacker can inject additional headers into the request by adding...