Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: ithewei Component: Libhv Clear all filters
TI-2023-11371 CVE-2023-26147 · GHSA-fh2j-2j24-wjwp

HTTP response splitting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-113
TI-2023-11372 CVE-2023-26148 · GHSA-qfcm-r8pp-mrfm

Injection in ithewei/libhv

Priority MEDIUM 58

All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-93
TI-2023-11370 CVE-2023-26146 · GHSA-f4xh-jq5v-423g

Cross-site scripting in ithewei/libhv

Priority HIGH 66

All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is served by the application, the filename is displayed without prop…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0044 Published 2023-09-29 No fix listed CWE-79