CVE-2020-6858

Publication date

2020-03-12 13:38:58

Family

mitre

State

PUBLISHED

Description

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.