← Back

CVE-2015-1445

nvd nist
Published: Aug 28, 2017Modified: May 13, 2026

JSON object

Loading...
7.2
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD

Description

HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.

Affected (2)

Products: Fli4l: Fli4l
Fli4l
1 product
Fli4l
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Fli4l
Fli4l
Up to 3.10.0
Fli4l
Version 4.0

Related CWEs

CWE-113
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
The product receives data from an HTTP agent/component (e.g., web server, proxy, browser, etc.), but it does not neutralize or incorrectly neutralizes CR and LF characters before the data is included in outgoing HTTP headers.

References (6)

Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: cve@mitre.org
MitigationVendor Advisory
Source: cve@mitre.org
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory

Timeline

No history available yet.