Lucene search
Veracode Vulnerability DatabaseVERACODE:13270HistoryJan 28, 2019 - 2:45 a.m.
CRLF Injection
2019-01-2802:45:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
0.001 Low
EPSS
Percentile
45.1%
pypiserver is vulnerable to CRLF injection. A remote attacker is able to inject newline characters %0d%0a into the server response and create arbitrary HTTP headers or perform cross-site scripting attacks. This is due to unescaped values being passed from a client and used directly for redirects.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pypiserver | le | 1.2.5 |
Related
osv
osv
CRLF Injection in pypiserver
2019-01-30 20:56:26
CVE-2019-6802
2019-01-25 04:29:00
PYSEC-2019-113
2019-01-25 04:29:00
github
github
CRLF Injection in pypiserver
2019-01-30 20:56:26
cvelist
cvelist
CVE-2019-6802
2019-01-25 04:00:00
nvd
nvd
CVE-2019-6802
2019-01-25 04:29:00
cve
cve
CVE-2019-6802
2019-01-25 04:29:00
prion
prion
Crlf injection
2019-01-25 04:29:00
nuclei
nuclei
Pypiserver <1.2.5 - Carriage Return Line Feed Injection
2022-12-05 23:32:40