CVE-2019-6802

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI

published January 25, 2019

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03802 · 90.0th percentile
Published
2019-01-25T04:00Z
EPSS history
Timeline
  • 25 JAN 04:00Z
    CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI
    cvelistv5