CVE-2002-1405

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the…

published September 1, 2004

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05039 · 92.2th percentile
Published
2004-09-01T04:00Z
EPSS history
Timeline
  • 01 SEP 04:00Z
    CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the…
    cvelistv5