CVE-2020-11709
PoC ×2—CVSS 3.1
7.5 high
EPSS
2%p76
Published
()
Modified
Description
cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.
- Vendors
- yhirose
- Products
- cpp-httplib
- Weakness
- CWE-74
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
In the news0 stories
No ingested article mentions this CVE yet.