CVE-2024-40324
A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splittin…
Published: 2024-07-25 · CVSS: 9.8 · CVSS 3.1
A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7