Versions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors.
**Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: snyk
Published: 2023-05-30T05:00:02.254Z
Updated: 2024-06-05T19:29:09.486Z
Reserved: 2023-02-20T10:28:48.924Z
Link: CVE-2023-26130
JSON object: View
NVD Information
Status : Modified
Published: 2023-05-30T05:15:10.640
Modified: 2024-05-02T03:15:14.767
Link: CVE-2023-26130
JSON object: View
Redhat Information
No data.