CVE-2025-0825 — CRLF injection in Cpp-httplib
cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection t…
Published: 2025-02-04 · CVSS: 6.9 · CVSS 4.0
cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7