HTTP Response Splitting

🗓️ 04 Mar 2020 05:28:42Reported by Veracode Vulnerability DatabaseType

Styx HTTP Response Splitting vulnerability in Nett

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2020-6858	12 Mar 202014:15	–	attackerkb
Circl	CVE-2020-6858	10 Feb 202011:28	–	circl
CVE	CVE-2020-6858	12 Mar 202013:38	–	cve
Cvelist	CVE-2020-6858	12 Mar 202013:38	–	cvelist
EUVD	EUVD-2020-0336	7 Oct 202500:30	–	euvd
Github Security Blog	HTTP Response Splitting in Styx	3 Mar 202015:32	–	github
NVD	CVE-2020-6858	12 Mar 202014:15	–	nvd
OSV	GHSA-6V7P-V754-J89V HTTP Response Splitting in Styx	3 Mar 202015:32	–	osv
Prion	Crlf injection	12 Mar 202014:15	–	prion
RedhatCVE	CVE-2020-6858	22 May 202515:41	–	redhatcve

Vulners

Node

hotels styx-apiRange0.7.3–1.0.0-rc1java

hotels styx-apiRangestyx-1.0.0.beta2–0.0.1.beta6java

hotels styx-apiMatch0.0.5java

hotels styx-serverRange0.7.3–1.0.0-rc1java

hotels styx-serverRangestyx-1.0.0.beta2–0.0.1.beta6java

hotels styx-serverRange0.7.3–0.7.10java

hotels styx-clientRange0.7.3–1.0.0.beta9java

Source	Link
github	www.github.com/HotelsDotCom/styx/commit/e55c172551d3cf0efd322207274262e30aaf225a
twitter	www.twitter.com/jlleitschuh
github	www.github.com/advisories/GHSA-6v7p-v754-j89v
github	www.github.com/HotelsDotCom/styx/security/advisories/GHSA-6v7p-v754-j89v
github	www.github.com/HotelsDotCom/styx/blob/8d60e5493e65d0d536afc0b350dcb02d24e0f7a7/components/server/src/main/java/com/hotels/styx/server/netty/connectors/StyxToNettyResponseTranslator.java
github	www.github.com/HotelsDotCom/styx/blob/e1d578e9b9c38df9cd19c21dc2eb9b949d85b558/components/api/src/main/java/com/hotels/styx/api/HttpHeaders.java

12 Aug 2024 19:55Current

0.6Low risk

Vulners AI Score0.6

CVSS 24.3

CVSS 3.16.5

EPSS0.01162