Beveiligingsadvies

CVE-2023-41834

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-19 12:34:16

Laatst bijgewerkt 2025-02-13 17:09:03

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user's browser. Users should upgrade to Apache Flink Stateful Functions version 3.3.0.

← Alle CVE's bekijken Bekijk op cve.org ↗