The issue concerns improper header parsing, allowing an attacker to sneak in a newline (`
`) into both the header names and values. Many servers will also accept `
` to terminate the header list, which is not in line with the specification that states `r
r
` should be used. This could potentially lead to application errors or invalid HTTP requests being sent out, possibly causing a denial of service vector if a remote service's web application firewall bans the application due to the receipt of malformed requests.