Lucene search
+L

1 matches found

OSV
OSV
added 2023/11/27 11:17 p.m.52 views

GHSA-Q3QX-C6G2-7PW2 aiohttp's ClientSession is vulnerable to CRLF injection via version

Summary Improper validation make it possible for an attacker to modify the HTTP request e.g. to insert a new header or even create a new HTTP request if the attacker controls the HTTP version. Details The vulnerability only occurs if the attacker can control the HTTP version of the request...

7.2CVSS6.2AI score0.00882EPSS
SaveExploits1References10
Rows per page
Query Builder