Weaknesses of type CWE-113

114 results

Injeção de quebras de linha em cabeçalhos HTTP

A aplicação recebe dados de entrada (parâmetros, cookies, etc.) e os coloca diretamente em cabeçalhos HTTP sem remover ou escapar caracteres de quebra de linha (CR e LF). Um atacante injeta esses caracteres para adicionar cabeçalhos falsos, redirecionar o usuário ou contaminar cache HTTP, comprometendo a integridade da resposta.

Example

Um site reflete um parâmetro de URL direto no cabeçalho Location: um atacante envia `Location: /page Set-Cookie: admin=true`, e o servidor cria um cookie falso na resposta. Ou injeta ` CONTEÚDO_MALICIOSO` para poluir cache de proxy e servir conteúdo malicioso a outros usuários.

How to mitigate

Remova ou escape caracteres CR (0x0D) e LF (0x0A) de qualquer entrada antes de usá-la em cabeçalhos HTTP. Valide valores de entrada contra um whitelist de caracteres permitidos. Use bibliotecas de HTTP que façam isso automaticamente e nunca construa cabeçalhos concatenando strings.

CVE-2026-55766MEDIUMguzzlehttp/psr7: CRLF Injection in HTTP Start-Line SerializationEPSS 0.2%CVE-2026-120639—CGI versions before 5.00 for Perl allow HTTP header injection via entity decoding after the newline check in header and unchecked values in multipart_start and do_pushEPSS 0.2%CVE-2026-7010MEDIUMHTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP request lines or control field header valuesEPSS 0.2%CVE-2026-9658HIGHPlack::Middleware::Security::Common versions before 0.13.1 for Perl did not block header injections in request pathsEPSS 0.2%CVE-2026-47675MEDIUMHono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injectionEPSS 0.2%CVE-2026-34767MEDIUMElectron: HTTP Response Header Injection in custom protocol handlers and webRequestEPSS 0.2%CVE-2026-42874LOWMicrodot: HTTP response splitting in Response.set_cookie()EPSS 0.2%CVE-2026-54163MEDIUMsecure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted inputEPSS 0.2%CVE-2026-108767MEDIUMMultiple vulnerabilities that affects IBM Db2 Genius HubEPSS 0.2%CVE-2026-23686LOWCRLF Injection vulnerability in SAP NetWeaver Application Server JavaEPSS 0.2%CVE-2026-49214MEDIUMguzzlehttp/psr7 has CRLF Injection via URI Host ComponentEPSS 0.2%CVE-2026-112880LOWCRLF injection in Proxy-Authorization header built from proxy_auth_fun in hackneyEPSS 0.2%CVE-2026-85976MEDIUMHTTP response splitting in Progress MarkLogic Server Query ConsoleEPSS 0.1%CVE-2026-21850MEDIUMHCL AION is affected by multiple security vulnerabilities.EPSS —