Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tornado ‘tornado.web.RequestHandler.set_header’ 函数CRLF注入漏洞
Vulnerability Description
Tornado是在FriendFeed的Web服务器及其常用工具的开源版本。 Tornado 2.2.1之前版本的tornado.web.RequestHandler.set_header函数中存在CRLF注入漏洞。远程攻击者可利用该漏洞借助特制输入注入任意HTTP头，导致HTTP响应拆分攻击。
CVSS Information
N/A
Vulnerability Type
N/A