CWE-113: HTTP Request Splitting
The product receives data from an HTTP agent/component (e.g., web server, proxy, browser, etc.), but it does not neutralize or incorrectly neutralizes CR and LF characters before the data is included in outgoing HTTP headers.
Also known as Improper Neutralization of CRLF Sequences in HTTP Headers, HTTP Response Splitting.
A kind of CWE-93 CRLF Injection.
From the CWE List. © The MITRE Corporation.
Newest
- s9y serendipitySerendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST7.2 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain4.8 Medium
- honoHono - Missing Cookie Name Validation in setCookie()6.9 Medium
- electronElectron: HTTP Response Header Injection in custom protocol handlers and webRequest5.9 Medium
- vshakitskiy eweewe Has Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting)5.3 Medium
- aio-libs aiohttpAIOHTTP: C parser (llhttp) accepts null bytes and control characters in response header values - header injection / security bypass2.7 Low
- aio-libs aiohttpAIOHTTP: HTTP response splitting via \r in reason phrase2.7 Low
- aio-libs aiohttpAIOHTTP: CRLF injection in multipart part content type header construction2.7 Low
- hcl aftermarket dpc, hcltech aftermarket cloud +1 moreHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability3.1 Low
- honoHono: Cookie Attribute Injection via Unsanitized domain and path in setCookie()5.4 Medium
- calibre-ebook calibrecalibre Vulnerable to HTTP Response Header Injection6.4 Medium
- sap se netweaver and abap platform (application server abap), sap netweaver as abap kernel, netweaver as abap krnl64nuc +1 more +3 moreMemory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP)3.1 Low
- sap netweaver application server javaCRLF Injection vulnerability in SAP NetWeaver Application Server Java3.4 Low
- happyhackingspace gakidoGakido vulnerable to HTTP Header Injection (CRLF Injection)5.3 Medium
- neoteroi blacksheepBlackSheep ClientSession is vulnerable to CRLF injection6.3 Medium
- com.ritense.valtimo web, pi-hole web interface +1 morePi-hole Admin Interface vulnerable to HTTP response header injection via CRLF injection8.2 High
- honoHono - Vary Header Injection in CORS Middleware6.9 Medium
- juliaweb http.jlHTTP.jl vulnerable to Header injection/Response splitting via header construction.8.7 High
- manwar cgi::simpleCGI::Simple versions 1.281 and earlier for Perl has a HTTP response splitting flaw7.3 High
- sap se s/4hana (supplier invoice)CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)4.3 Medium
- esp32async espasyncwebserverESPAsyncWebServer Vulnerable to CRLF Injection in AsyncWebHeader.cpp8.7 High
- espressif arduino-esp32arduino-esp32 vulnerable to CRLF injection in WebServer.cpp8.9 High
- juliaweb http.jlHTTP.jl vulnerable to CR/LF Injection in URIs7.7 High
- vmware spring frameworkRFD Attack via “Content-Disposition” Header Sourced from Request6.5 Medium
- shopify pitchforkPitchfork HTTP Request/Response Splitting vulnerability4.3 Medium
- octopus serverIn affected versions of Octopus Server it was possible for a user with sufficient access to set...5.9 Medium
- yhirose cpp-httplibCRLF injection in Cpp-httplib6.9 Medium
- gfi kerio controlAn issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed...8.8 High
- payara platform micro, server +1 moreHTTP Server incorrectly accepting disallowed characters within header values2.4 Low
- fortinet fortios, fortiproxy +1 moreAn improper neutralization of crlf sequences in http headers ('http response splitting') in...6.4 Medium
- restsharpCRLF Injection in RestSharp's `RestRequest.AddHeader` method6.1 Medium
- ciliumCilium's Gateway API route matching order contradicts specification4.0 Medium
- datex-soft e-staffA CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR)...5.4 Medium
- tornadoweb tornadoTornado before 6.4.1 CRLF Injection via CurlAsyncHTTPClient6.3 Medium
- cisco asyncos, secure email +1 moreA vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email...6.1 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modules6.3 Medium
- trillium, trillium trillium-http +1 moretrillium-http and trillium-client vulnerable to HTTP Request/Response Splitting6.8 Medium
- bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 moreThe vulnerability allows a remote attacker to inject arbitrary HTTP response headers or...5.3 Medium
- netty, red hat cryostat 4 on rhel 9, openshift serverless +32 more +34 moreNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Low
- ithewei libhvAll versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when...5.3 Medium
- joinmastodon mastodonMastodon Server-Side Request Forgery vulnerability5.4 Medium
- apache flink stateful functionsApache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences6.1 Medium
- crowcpp crowAll versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user...6.5 Medium
- go standard library net/http, golang go +1 moreInsufficient sanitization of Host header in net/http6.5 Medium
- drogonAll versions of the package drogonframework/drogon are vulnerable to HTTP Response Splitting when...7.2 High
- ami megarac sp-x, megarac spx +1 moreAMI SPx contains a vulnerability in the BMC where an Attacker may cause an improper...5.7 Medium
- gitlabImproper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLab3.1 Low
- splunk, splunk cloud platform, enterprise +2 moreHTTP Response Splitting via the ‘rest’ SPL Command7.2 High
- fortinet fortios, fortiproxy +1 moreA improper neutralization of crlf sequences in http headers ('http response splitting') in...4.0 Medium
- onshift turbogearsOnShift TurboGears HTTP Header controllers.py response splitting6.3 Medium
- Show moreLoading…