CVE-2015-0881

Publication date

2015-02-20 11:00:00

Family

jpcert

State

PUBLISHED

Description

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.