Unrated
CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.
CVE-2019-6802
First seen on SecPulse
Original description The description as published by the source.
CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- report github.com