Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
All versions of the package crow are vulnerable to HTTP Response Splitting when untrusted user input is used to build header values. Header values are not properly sanitized against CRLF Injection in the set_header and add_header functions. An attacker can add the \r\n (carriage return line feeds) characters to end the HTTP response headers and inject malicious content.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
HTTP头部中CRLF序列转义处理不恰当(HTTP响应分割)
Vulnerability Title
Crow 注入漏洞
Vulnerability Description
Crow是一个用于运行 Web 服务的 C++ 微框架。 Crow 存在安全漏洞，该漏洞源于当使用不受信任的用户输入来构建标头值时，容易受到 HTTP 响应拆分的影响， set_header 和 add_header 函数中的标头值未针对 CRLF 注入进行正确清理，攻击者利用该漏洞可以添加 （回车换行符）字符来结束 HTTP 响应标头并注入恶意内容。
CVSS Information
N/A
Vulnerability Type
N/A