Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in the on_req function in lib/handler/redirect.c in H2O before 1.6.2 and 1.7.x before 1.7.0-beta3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
H2O CRLF注入漏洞
Vulnerability Description
H2O是一套开源的Web服务器软件。 H2O 1.6.2之前版本和1.7.0-beta3之前1.7.x版本的lib/handler/redirect.c文件中的‘on_req’函数存在CRLF注入漏洞。远程攻击者可借助特制的URI利用该漏洞注入任意HTTP头，实施HTTP响应拆分攻击。
CVSS Information
N/A
Vulnerability Type
N/A