Description

CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.

Remediation

References

CVE-2012-2374

Related Vulnerabilities

WordPress Plugin DX Share Selection Cross-Site Request Forgery (1.4)

Seo Panel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-28419)

WordPress Plugin Media File Renamer-Auto & Manual Rename Cross-Site Scripting (1.7.0)

AbanteCart Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-26521)

WordPress Plugin RSVPMaker SQL Injection (5.6.3)

Severity

Medium

Classification

CVE-2012-2374 CWE-20

Tags

Missing Update Known Vulnerabilities