1 matches found
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection in the start-line serialization of the Message class toString, parseRequest, and parseResponse. An attacker can inject header lines and split or smuggle HTTP messages by placing CR or LF characters into the request method...
6.3CVSS5.9AI score0.00229EPSS
SaveExploits0References2
20