Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40189
HistoryApr 19, 2023 - 11:51 a.m.

HTTP Request Smuggling

2023-04-1911:51:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
http request smuggling
insecure header validation
headers.php
http cache poisoning
phishing attacks
slim/psr7

0.001 Low

EPSS

Percentile

32.4%

slim/psr7 is vulnerable to Insecure Header Validation. The vulnerability exists in the validateHeaderName function in Headers.php, which allows an attacker to sneak in a newline (\n) into header names and values, potentially resulting in HTTP cache poisoning or phishing attacks.

CPENameOperatorVersion
slim/psr7le1.6
slim/psr7le1.6

0.001 Low

EPSS

Percentile

32.4%