Search vulnerabilities

Results 1

Export CSV
CVE-2024-40324

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products