| Название | Ritlabs TinyWeb Server 1.94 CRLF Injection |
|---|
| Описание | Application is vulnerable to HTTP requests containing CRLF pattern (%0A%0D). Reflecting output in HTTP response is possible.
The CRLF vulnerability also always application log tampering by inserting new illegitimate lines. |
|---|
| Источник | ⚠️ https://github.com/DMCERTCE/CRLF_Tiny |
|---|
| Пользователь | Senatorhotchkiss (UID 68254) |
|---|
| Представление | 12.05.2024 09:57 (2 лет назад) |
|---|
| Модерация | 22.05.2024 07:12 (10 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 265830 [Ritlabs TinyWeb Server 1.94 Request эскалация привилегий] |
|---|
| Баллы | 16 |
|---|