An issue was discovered in the http package through 0.12.2 for Dart
published December 24, 2020
CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is
An issue was discovered in the http package through 0.12.2 for Dart. If the attacker controls the HTTP method and the app is using Request directly, it's possible to achieve CRLF injection in an HTTP request.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02155 · 82.0th percentile
Published
2020-12-24T02:05Z
EPSS history
Timeline
24 DEC 02:05Z
An issue was discovered in the http package through 0.12.2 for Dart