CVE-2024-1064
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
Résumé
Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com