PT-2021-19283 · Dio · Dio
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
dio package versions prior to 5.0.0
Description
The issue allows CRLF injection if the attacker controls the HTTP method string. This is a different issue than previously identified problems.
Recommendations
For dio package versions prior to 5.0.0, update to version 5.0.0 or later to resolve the issue.
Exploit
Fix
Special Elements Injection
Argument Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Dio