Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-26138
HistoryJul 06, 2023 - 5:15 a.m.

Crlf injection

2023-07-0605:15:00
PRIOn knowledge base
www.prio-n.com
2
crlf injection
drogonframework
vulnerability
untrusted user input
request headers
addheader function
security

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader function. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.7%

Related for PRION:CVE-2023-26138