Beveiligingsadvies

CVE-2025-0825

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-02-04 14:11:51

Laatst bijgewerkt 2025-05-23 12:50:55

Toegewezen door Checkmarx

CVSS-score 6.9

Status PUBLISHED

Beschrijving

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

← Alle CVE's bekijken Bekijk op cve.org ↗