SUSE CVE-2018-1000164

gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "processheaders" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. This vulnerability appears to have been...

The vulnerability of the process_headers function (gunicorn/http/wsgi.py) in the WSGI server gunicorn, which allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the processheaders function gunicorn/http/wsgi.py in the WSGI server gunicorn exists due to the lack of measures to neutralize CRLF sequences. Exploiting this vulnerability allows a remote attacker to perform XSS attacks...

Gunicorn HTTP Response Splitting Vulnerability Vulnerability

gunicorn is a UNIX-based Python WSGI HTTP server software. A security vulnerability exists in the 'processheaders' function of the nicorn/http/wsgi.py file in gunicorn version 19.4.5. An attacker can exploit this vulnerability to cause the server to return arbitrary HTTP packet headers...

DEBIAN-CVE-2018-1000164

gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "processheaders" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. This vulnerability appears to have been...

PT-2018-3488

Name of the Vulnerable Software and Affected Versions: gunicorn versions prior to 19.5.0 Description: The issue is related to an improper neutralization of CRLF sequences in HTTP headers, which can be exploited to return arbitrary HTTP headers. This can potentially lead to cross-site scripting XS...

UBUNTU-CVE-2018-1000164

gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "processheaders" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. This vulnerability appears to have been...