Lucene search
K

5 matches found

NVD
NVD
added 2023/09/19 1:16 p.m.11 views

CVE-2023-41834

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content...

6.1CVSS6.4AI score0.01579EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2023/09/19 12:34 p.m.12 views

CVE-2023-41834 Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content...

7AI score0.01579EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/09/19 12:34 p.m.14 views

CVE-2023-41834 Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content...

6.5AI score0.01579EPSS
Exploits0References2
CVE
CVE
added 2023/09/19 12:34 p.m.53 views

CVE-2023-41834

CVE-2023-41834 affects Apache Flink Stateful Functions. The issue is an improper neutralization of CRLF sequences in HTTP headers, enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting in versions 3.1.0, 3.1.1 and 3.2.0. Potential consequence: injected con...

6.1CVSS6.3AI score0.01579EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/09/19 12:0 a.m.2 views

Apache Flink 注入漏洞

Apache Flink is an open source distributed streaming data processing engine of the Apache Foundation . The product is mainly written in Java and Scala languages . Func is Knative open source a client library and CLI , support for the development and deployment of features . Apache Flink Stateful...

6.1CVSS7.5AI score0.01579EPSS
Exploits0References3
Rows per page
Query Builder