Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-93 (对CRLF序列的转义处理不恰当(CRLF注入)) — Vulnerability Class 83

83 vulnerabilities classified as CWE-93 (对CRLF序列的转义处理不恰当(CRLF注入)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2024-5193 Ritlabs TinyWeb Server Request crlf injection — TinyWeb Server 5.3 Medium2024-05-22
CVE-2024-1226 Multiple vulnerabilities in Rejetto's Http File Server — Http File Server 7.5 High2024-03-12
CVE-2024-20337 Cisco Secure Client 安全漏洞 — Cisco Secure Client 8.2 High2024-03-06
CVE-2023-49082 aiohttp's ClientSession is vulnerable to CRLF injection via method — aiohttp 5.3 Medium2023-11-29
CVE-2023-4768 Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central — Desktop Central 6.1 Medium2023-11-03
CVE-2023-4767 Improper Neutralization of CRLF Sequences in ManageEngine Desktop Central — Desktop Central 6.1 Medium2023-11-03
CVE-2023-26148 libhv 注入漏洞 — ithewei/libhv 5.4 Medium2023-09-29
CVE-2023-26138 Drogon 注入漏洞 — drogonframework/drogon 5.4 Medium2023-07-06
CVE-2023-26130 cpp-httplib 注入漏洞 — yhirose/cpp-httplib 7.5 High2023-05-30
CVE-2023-23936 CRLF Injection in Nodejs ‘undici’ via host — undici 6.5 Medium2023-02-16
CVE-2023-0040 Async 注入漏洞 — Async HTTP Client 7.5 -2023-01-18
CVE-2022-35948 CRLF Injection in Nodejs ‘undici’ via Content-Type — undici 5.3 Medium2022-08-13
CVE-2022-31150 CRLF injection in request headers — undici 5.3 Medium2022-07-19
CVE-2022-0666 CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in microweber/microweber — microweber/microweber 6.5 -2022-02-18
CVE-2021-4097 CRLF Injection in phpservermon/phpservermon — phpservermon/phpservermon 5.4 -2021-12-11
CVE-2021-39172 New line injection during configuration edition — Cachet 8.8 High2021-08-27
CVE-2021-31164 Apache Unomi log injection — Apache Unomi 9.1 -2021-05-04
CVE-2020-3561 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software WebVPN CRLF Injection Vulnerability — Cisco Adaptive Security Appliance (ASA) Software 6.1 -2020-10-21
CVE-2020-11078 CRLF injection in httplib2 — httplib2 6.8 Medium2020-05-20
CVE-2020-3246 Cisco Umbrella Carriage Return Line Feed Injection Vulnerability — Cisco Umbrella 4.3 -2020-05-06
CVE-2019-15616 Nextcloud Server 注入漏洞 — Nextcloud Server 6.5 -2020-02-04
CVE-2018-12477 obs-service-refresh_patches can be tricked into deleting '..' or other unrelated directories — Open Build Service 6.5 -2018-10-09
CVE-2018-12537 Eclipse Vert.x 安全漏洞 — Eclipse Vert.x 5.3 -2018-08-14

Vulnerabilities classified as CWE-93 (对CRLF序列的转义处理不恰当(CRLF注入)) represent 83 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.