CVE-2024-1064
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
Summary
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
Original description
The description as published by the source.
A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com