Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
All versions of the package drogonframework/drogon are vulnerable to CRLF Injection when untrusted user input is used to set request headers in the addHeader function. An attacker can add the \r\n (carriage return line feeds) characters and inject additional headers in the request sent.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Vulnerability Type
对CRLF序列的转义处理不恰当(CRLF注入)
Vulnerability Title
Drogon 注入漏洞
Vulnerability Description
Drogon是开源的一个基于 C++14/17 的 HTTP 应用程序框架。Drogon 可用于使用 C++ 轻松构建各种类型的 Web 应用程序服务器程序。 Drogon 存在安全漏洞，该漏洞源于存在CRLF注入问题，允许攻击者添加rn字符，并在发送的请求中注入其他标头。
CVSS Information
N/A
Vulnerability Type
N/A