14 lines
1020 B
JSON
14 lines
1020 B
JSON
{
|
|
"id": "openEuler-SA-2023-1365",
|
|
"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2023-1365",
|
|
"title": "An update for cpp-httplib is now available for openEuler-22.03-LTS",
|
|
"severity": "High",
|
|
"description": "A C++11 single-file header-only cross platform HTTP/HTTPS library. It's extremely easy to setup. Just include httplib.h file in your code\r\n\r\nSecurity Fix(es):\r\n\r\nVersions of the package yhirose/cpp-httplib before 0.12.4 are vulnerable to CRLF Injection when untrusted user input is used to set the content-type header in the HTTP .Patch, .Post, .Put and .Delete requests. This can lead to logical errors and other misbehaviors.\r\n\r\n**Note:** This issue is present due to an incomplete fix for [CVE-2020-11709](https://security.snyk.io/vuln/SNYK-UNMANAGED-YHIROSECPPHTTPLIB-2366507).(CVE-2023-26130)",
|
|
"cves": [
|
|
{
|
|
"id": "CVE-2023-26130",
|
|
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-26130",
|
|
"severity": "High"
|
|
}
|
|
]
|
|
} |