Read the docs

ithewei

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ithewei records in CISA KEV

No ithewei vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libhv 3 records HIGH

Records

4 records

TI-2023-11371 CVE-2023-26147 · GHSA-fh2j-2j24-wjwp

HTTP response splitting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-113
TI-2023-11370 CVE-2023-26146 · GHSA-f4xh-jq5v-423g

Cross-site scripting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without prop…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-79
TI-2023-11372 CVE-2023-26148 · GHSA-qfcm-r8pp-mrfm

Injection in ithewei/libhv

Priority MEDIUM 58

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-93
TI-2025-01612 CVE-2025-1867 · GHSA-4qqr-wvpj-rjf9

HTTP Response Smuggling Vulnerability in libhv

Priority MEDIUM 49

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00385 Published 2025-03-03 No fix listed CWE-444
Open these records in search →