Interpretation Conflict

bref/bref is vulnerable to Interpretation Conflict. The vulnerability is caused by the mishandling of headers due to the server only returning the last header if multiple headers are included in a request. If the application relies on multiple headers with the same key being set for security reasons, an attacker can lower the security of the request.