CVE-2024-1064
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
概要
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com