Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS04cXY4LWZxNXctcDk2Ns0a1Q

phpservermon is vulnerable to CRLF Injection

phpservermon is vulnerable to Improper Neutralization of CRLF Sequences.

Permalink: https://github.com/advisories/GHSA-8qv8-fq5w-p966
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04cXY4LWZxNXctcDk2Ns0a1Q
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: over 2 years ago
Updated: over 1 year ago

CVSS Score: 6.3
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Identifiers: GHSA-8qv8-fq5w-p966, CVE-2021-4097
References:

• https://nvd.nist.gov/vuln/detail/CVE-2021-4097
• https://github.com/phpservermon/phpservermon/commit/162bba0046fcda1580f4fbc7b9ababe3c7c13ce4
• https://huntr.dev/bounties/d617ced7-be06-4e34-9db0-63d45c003a43
• https://github.com/advisories/GHSA-8qv8-fq5w-p966

Repository: https://github.com/phpservermon/phpservermon
Blast Radius: 1.0

Affected Packages