Weaknesses of type CWE-113

114 results

Injeção de quebras de linha em cabeçalhos HTTP

A aplicação recebe dados de entrada (parâmetros, cookies, etc.) e os coloca diretamente em cabeçalhos HTTP sem remover ou escapar caracteres de quebra de linha (CR e LF). Um atacante injeta esses caracteres para adicionar cabeçalhos falsos, redirecionar o usuário ou contaminar cache HTTP, comprometendo a integridade da resposta.

Example

Um site reflete um parâmetro de URL direto no cabeçalho Location: um atacante envia `Location: /page Set-Cookie: admin=true`, e o servidor cria um cookie falso na resposta. Ou injeta ` CONTEÚDO_MALICIOSO` para poluir cache de proxy e servir conteúdo malicioso a outros usuários.

How to mitigate

Remova ou escape caracteres CR (0x0D) e LF (0x0A) de qualquer entrada antes de usá-la em cabeçalhos HTTP. Valide valores de entrada contra um whitelist de caracteres permitidos. Use bibliotecas de HTTP que façam isso automaticamente e nunca construa cabeçalhos concatenando strings.

CVE-2026-42035HIGHAxios: Header Injection via Prototype PollutionEPSS 0.4%CVE-2022-37953MEDIUMWorkstationST - Response Splitting in AM Gateway Challenge-ResponseEPSS 0.4%CVE-2026-24489MEDIUMGakido vulnerable to HTTP Header Injection (CRLF Injection)EPSS 0.4%CVE-2024-20392MEDIUMA vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remEPSS 0.4%CVE-2026-43870HIGHApache Thrift: Node.js web_server.js multi-vulnerabilityEPSS 0.4%CVE-2026-50630MEDIUMApache CXF: OAuth2: HTTP Response Splitting via WWW-Authenticate Realm InjectionEPSS 0.4%CVE-2025-62826LOWAn Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FEPSS 0.4%CVE-2026-93711MEDIUMDancer2 versions before 2.2.0 for Perl do not strip CR and LF from response header names in headers_to_arrayEPSS 0.4%CVE-2026-22779MEDIUMBlackSheep ClientSession is vulnerable to CRLF injectionEPSS 0.4%CVE-2026-103930LOWcpp-httplib open_stream serializes CRLF in request target into HTTP request lineEPSS 0.4%CVE-2025-61689HIGHHTTP.jl vulnerable to Header injection/Response splitting via header construction.EPSS 0.3%CVE-2026-34715MEDIUMewe Has Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Request/Response Splitting)EPSS 0.3%CVE-2026-66746MEDIUMRouille 0.4.0 - 3.6.2 HTTP Response Splitting via Header InjectionEPSS 0.3%CVE-2026-38967CRITICALCrowCpp Crow through v1.3.1 HTTP is vulnerable to response header injection via unvalidated response header values.EPSS 0.3%CVE-2025-55271LOWHCL Aftermarket DPC is affected by HTTP Response Splitting vulnerabilityEPSS 0.3%CVE-2026-41683HIGHHTTP response splitting and DoS in i18next-http-middleware via unsanitised Content-Language headerEPSS 0.3%CVE-2026-34514LOWAIOHTTP: CRLF injection in multipart part content type header constructionEPSS 0.3%CVE-2026-69211MEDIUMHttp4s: Set-Cookie rendering does not escape attribute delimitersEPSS 0.3%CVE-2026-106512HIGHMISP sachertortephp - CakeResponse::download() HTTP Response Splitting via Unsanitized Filename Enables Stored XSSEPSS 0.3%CVE-2026-38978MEDIUMtransmission through 4.1.1 was found to have a clickjacking weakness in the browser-facing WebUI and RPC response paths.EPSS 0.3%