CVE-2020-6858

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection

published March 12, 2020

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01162 · 66.9th percentile
Published
2020-03-12T13:38Z
EPSS history
Timeline
  • 12 MAR 13:38Z
    Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection
    cvelistv5