Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information via a header that ends in \n instead of \r\n, which prevents a null terminator from being added and causes Tntnet to include headers from other requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tntnet 安全漏洞
Vulnerability Description
Tntnet是一款Web应用服务器,它支持使用C++编写Web应用,在HTML页面上编写C++代码等。 Tntnet 2.2.1之前的版本中的framework/common/messageheaderparser.cpp文件中存在安全漏洞,该漏洞源于当处理HTTP头部信息时存在错误。远程攻击者可通过提交以‘r’字符结尾的头信息请求利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A