Lucene search
+L

1 matches found

OSV
OSV
added 2026/06/02 7:8 p.m.12 views

EEF-CVE-2026-48598 CRLF injection in Tesla.Multipart disposition parameters allows multipart part header injection

Summary Improper Encoding or Escaping of Output vulnerability in elixir-tesla tesla allows multipart part header injection via unescaped Content-Disposition parameter values. Tesla.Multipart.part\headers\for\disposition/1 interpolates each disposition parameter as k="v" with no validation of CR...

2.1CVSS6.1AI score0.0019EPSS
SaveExploits0References4
Rows per page
Query Builder