Filtered by vendor Apache Subscriptions
Filtered by product Flink Stateful Functions Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-41834 1 Apache 1 Flink Stateful Functions 2023-09-22 6.1 Medium
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user's browser. Users should upgrade to Apache Flink Stateful Functions version 3.3.0.