1 matches found
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection via the soupmessagenew function. An attacker can manipulate HTTP headers and request data by supplying specially crafted input containing CRLF sequences. Remediation A fix was pushed into the master branch but not yet...
6.5CVSS5.8AI score0.00223EPSS
SaveExploits1References2
20