Read the docs

ithewei

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ithewei records in CISA KEV

No ithewei vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Libhv 3 records HIGH

Records

3 records in Libhv · all components

TI-2023-11371 CVE-2023-26147 · GHSA-fh2j-2j24-wjwp

HTTP response splitting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-113
TI-2023-11370 CVE-2023-26146 · GHSA-f4xh-jq5v-423g

Cross-site scripting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without prop…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-79
TI-2023-11372 CVE-2023-26148 · GHSA-qfcm-r8pp-mrfm

Injection in ithewei/libhv

Priority MEDIUM 58

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-93
Open these records in search →