Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47464

HistoryJun 11, 2024 - 6:26 a.m.

CRLF Injection

2024-06-1106:26:24

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

3

crlf injection

tornado

vulnerability

improper checks

attacker-controlled

header values

arbitrary headers

specified server

7.1 High

AI Score

Confidence

High

tornado is vulnerable to CRLF Injection. The vulnerability is due to improper CR/LF checks allowing for the inclusion of attacker-controlled header values in requests, which allows arbitrary headers or requests to be sent to a specified server.

7.1 High

AI Score

Confidence

High