CVE-2025-6175

—

CVSS 3.1

7.2 high

EPSS

<1%p11

Published

Jul 29, 2025 (Jul 29, 2025)

Modified

Jun 17, 2026

Description

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in DECE Software Geodi allows HTTP Request Splitting. This issue affects Geodi: before GEODI Setup 9.0.146.

Weakness: CWE-93
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.