PT-2016-4591

Name of the Vulnerable Software and Affected Versions H2O versions prior to 1.6.2 H2O versions 1.7.x prior to 1.7.0-beta3 Description A CRLF injection issue exists in the on req function in lib/handler/redirect.c, allowing remote attackers to inject arbitrary HTTP headers and conduct HTTP respons...