| Titel | Ritlabs TinyWeb Server 1.94 CRLF Injection |
|---|
| Beschreibung | Application is vulnerable to HTTP requests containing CRLF pattern (%0A%0D). Reflecting output in HTTP response is possible.
The CRLF vulnerability also always application log tampering by inserting new illegitimate lines. |
|---|
| Quelle | ⚠️ https://github.com/DMCERTCE/CRLF_Tiny |
|---|
| Benutzer | Senatorhotchkiss (UID 68254) |
|---|
| Einreichung | 12.05.2024 09:57 (vor 2 Jahren) |
|---|
| Moderieren | 22.05.2024 07:12 (10 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 265830 [Ritlabs TinyWeb Server 1.94 Request erweiterte Rechte] |
|---|
| Punkte | 16 |
|---|