CVE-2018-12537CWE-93

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters…

published August 14, 2018

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters from the header value. This allow unfiltered values to inject a new header in the client request or server response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02482 · 84.5th percentile
Weakness
CWE-93 · Improper Neutralization of CRLF Sequences ('CRLF Injection')
Published
2018-08-14T19:00Z
EPSS history
Timeline
  • 14 AUG 19:00Z
    In Eclipse Vert.x version 3.0 to 3.5.1, the HttpServer response headers and HttpClient request headers do not filter carriage return and line feed characters…
    cvelistv5