CVE-2023-26142

CVSS 3.1 Score 6.1 of 10 (medium)

Details

Published Sep 12, 2023
Updated: Nov 7, 2023
CWE ID 74
CWE ID 113

Summary

CVE-2023-26142 is a vulnerability that affects all versions of the package crow. It is categorized as a medium-severity vulnerability with a base score of 6.1. The vulnerability occurs when untrusted user input is used to build header values, allowing for HTTP Response Splitting attacks. The set_header and add_header functions do not properly sanitize header values against CRLF Injection. This allows an attacker to inject malicious content by adding carriage return line feed characters to end the HTTP response headers. The potential danger of this vulnerability is low integrity and low confidentiality impact, with no privileges required for exploitation. Remediation for this vulnerability involves updating the affected package to a version that properly sanitizes header values against CRLF Injection.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-26142 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options