Beveiligingsadvies

CVE-2024-40324

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-07-25 00:00:00
Laatst bijgewerkt 2024-08-02 04:33:11
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.