PT-2016-4045 · Varnish · Varnish

Name of the Vulnerable Software and Affected Versions: Varnish versions 3.x through 3.0.6 Description: The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a header line terminated by a r carriage return character in conjunction with...