CWE-113: HTTP Request Splitting
The product receives data from an HTTP agent/component (e.g., web server, proxy, browser, etc.), but it does not neutralize or incorrectly neutralizes CR and LF characters before the data is included in outgoing HTTP headers.
Also known as Improper Neutralization of CRLF Sequences in HTTP Headers, HTTP Response Splitting.
A kind of CWE-93 CRLF Injection.
From the CWE List. © The MITRE Corporation.
Newest
- hcl aion HCL AION is affected by multiple security vulnerabilities. 6.5 Medium
- apache software foundation juneau Apache Juneau: Response header CRLF injection and open redirect when applications set headers or redirect targets from request data 10.0 Critical
- ibm db2 genius hub Multiple vulnerabilities that affects IBM Db2 Genius Hub 4.3 Medium
-
libcgi-pm-perlDebian,perl-CGIAzure Linux +1 more CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_push No score -
adminneo-org/adminneoPackagist AdminNeo has Cookie Attribute Injection via Unsanitized X-Forwarded-Prefix in Set-Cookie Headers 8.2 High - benoitc hackney CRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackney 2.1 Low
- intranda goobi-viewer-core Goobi viewer: IIIF Auth 2.0 origin parameter unsanitized — CSP malformation and reflected XSS 9.3 Critical
- yhirose cpp-httplib cpp-httplib open_stream serializes CRLF in request target into HTTP request line 3.7 Low
- progress software corporation marklogic server HTTP response splitting in Progress MarkLogic Server Query Console 5.4 Medium
- asustor inc. adm An HTTP header injection vulnerability was found in the ADM 9.2 Critical
- misp sachertortephp MISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSS 8.4 High
-
libdancer2-perlDebian,perl-Dancer2openSUSE +1 more Dancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_array 6.5 Medium - st engineering idirect evo idx, idx +1 more ST Engineering iDirect iDX/Evo iDX HTTP Request authorize response splitting 5.3 Medium
- sanic-org sanic Sanic: HTTP response header injection via missing CR/LF validation in Sanic HTTP/1.1 responses 8.2 High
- middleapi orpc oRPC: Vary Header Injection in CORS Plugin leading to potential Cache/CORS Bypass 6.3 Medium
- http4s Http4s: Set-Cookie rendering does not escape attribute delimiters 4.8 Medium
- a2aproject a2a-java a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splitting 6.9 Medium
- unknown ajaxify comments Ajaxify Comments < 3.2 - Unauthenticated HTTP Header Injection 5.4 Medium
- tornadoweb tornado Tornado before 6.5.8 Cookie Attribute Injection via Capitalized kwargs 6.3 Medium
- yhirose cpp-httplib cpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing 5.3 Medium
- spring framework, vmware spring framework +1 more Spring Framework response splitting in ContentDisposition 3.7 Low
- No product listed go-wind-cms (GoWind) before 1.0.0 has a missing authorization vulnerability. The NewAuthorizer()... 8.8 High
- tim solutions flow TIM Flow < 26.0.6 CRLF Injection via rt Parameter 8.5 High
- fbeta-gmbh epa3-service-opensource ePA 3.x Integration: HTTP Header Injection in VAU Inner Requests 6.8 Medium
- freerdp FreeRDP before 3.29.0 HTTP Proxy Request Injection via Redirection 9.3 Critical
- tomaka rouille Rouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header Injection 5.3 Medium
- tiny-http tiny-http 0.12.0 HTTP Response Splitting via Header Injection 6.3 Medium
- apple swift-nio-http2, swiftnio http\/2 +1 more swift-nio-http2: Missing CR/LF/NUL validation in header values 5.3 Medium
- vrana adminer Adminer < 5.4.3 Cookie Injection via X-Forwarded-Prefix Header 6.0 Medium
- fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... 3.1 Low
- fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... 3.4 Low
- github secure headers secure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input 4.7 Medium
- guzzle psr7, guzzlephp psr-7 +1 more guzzlehttp/psr7: CRLF Injection in HTTP Start-Line Serialization 4.8 Medium
- getkirby kirby Kirby: Request header injection in `Http\Remote` 6.9 Medium
- aio-libs aiohttp AIOHTTP: CRLF injection in multipart headers 2.7 Low
- apache cxf Apache CXF: OAuth2: HTTP Response Splitting via WWW-Authenticate Realm Injection 6.5 Medium
- guzzle psr7, guzzlephp psr-7 +1 more guzzlehttp/psr7 has CRLF Injection via URI Host Component 5.3 Medium
- ninenines cowlib HTTP Response Splitting via Non-VCHAR Bytes in cow_http_struct_hd:escape_string/2 6.3 Medium
- elixir-tesla tesla CRLF injection in Tesla.Multipart.add_content_type_param/2 allows HTTP header injection 2.1 Low
-
transmissionDebian transmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI... 5.3 Medium - No product listed CrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated... 9.8 Critical
- axios Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incomplete Null-Prototype Fix 3.7 Low
- hono Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection 4.3 Medium
- rrwo plack::middleware::security::common Plack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request paths 7.3 High
- haarg http::tiny HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header values 6.5 Medium
- rexxars eventsource-encoder eventsource-encoder: SSE event injection via unsanitized event and id fields 5.8 Medium
- miguelgrinberg microdot Microdot: HTTP response splitting in Response.set_cookie() 3.7 Low
- apache thrift Apache Thrift: Node.js web_server.js multi-vulnerability 7.3 High
- axios Axios: Header Injection via Prototype Pollution 7.4 High
- i18next i18next-http-middleware HTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language header 8.6 High
- Show olderLoading…