Description

CRLF injection vulnerability in Squid before 3.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted header in a response.

Remediation

References

CVE-2015-0881

Related Vulnerabilities

Moodle Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9187)

WordPress Plugin Stop User Enumeration User Enumeration (1.2.4)

Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2022-42252)

phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-5159)

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3759)

Severity

Medium

Classification

CVE-2015-0881

Tags

Missing Update Known Vulnerabilities