Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2020-24275

Published: 20/07/2023 Updated: 31/07/2023
CVSS v3 Base Score: 6.5 | Impact Score: 2.5 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

A HTTP response header injection vulnerability in Swoole v4.5.2 allows malicious users to execute arbitrary code via supplying a crafted URL.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

swoole swoole 4.5.2

References

CWE-74https://portswigger.net/kb/issues/00200200_http-response-header-injectionhttps://github.com/swoole/swoole-src/pull/3539https://blog.cal1.cn/post/HTTP%20Response%20Header%20Injection%20in%20Swoole%3C%3D4.5.2https://github.com/swoole/swoole-src/pull/3545https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2020-17519open redirectCVE-2024-21683cache poisoningCVE-2021-47524CVE-2021-47521CVE-2024-5229CVE-2021-47560local
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook