CVE-2023-26130

Description

cpp-httplib before 0.12.4 is vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors.

Statement

No Red Hat product is affected by this vulnerability.

Understanding the Weakness (CWE)

Integrity

Technical Impact: Modify Application Data

Frequently Asked Questions

Want to get errata notifications? Sign up here.