CWE-113 · Injection and Smuggling
Improper Neutralization of CRLF Sequences in HTTP Headers
128CVEs
0exploited
2with a public check
1likely (EPSS 10%+)
SortMost likely exploited
128 CVEs with CWE-113 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-52875CheckKerio Control v9.2.5 - CRLF InjectionGFI · Kerio Control · CVSS 8.8 · 2025-01-31 | 8.8 | 29% | 2025-01-31 |
| CVE-2018-16979CheckMonstra CMS 3.0.4 - HTTP Header InjectionMonstra · Monstra · 2018-09-12 | – | 3.0% | 2018-09-12 |
| CVE-2022-37436Apache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingApache Software Foundation · Apache HTTP Server · CVSS 5.3 · 2023-01-17 | 5.3 | 53% | 2023-01-17 |
| CVE-2016-5699CRLF injection vulnerability in the HTTPConnection.putheader function in urllib2 and urllib in CPython (aka Python) before 2.7.10 and 3.x before 3.4.4 allows remote attackers to i…Python · Python · 2016-09-02 | – | 9.9% | 2016-09-02 |
| CVE-2016-8024Improper neutralization of CRLF sequences in HTTP headers vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote unauthenticated attac…Intel · VirusScan Enterprise Linux (VSEL) · 2017-03-14 | – | 8.7% | 2017-03-14 |
| CVE-2017-17742Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1 allows an HTTP Response Splitting attack. An attacker can inject a crafted key a…Ruby-Lang · Ruby · 2018-04-03 | – | 5.5% | 2018-04-03 |
| CVE-2016-5325CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote…Nodejs · Node.js · 2016-10-10 | – | 4.1% | 2016-10-10 |
| CVE-2024-24795Apache HTTP Server: HTTP Response Splitting in multiple modulesApache Software Foundation · Apache HTTP Server · CVSS 6.3 · 2024-04-04 | 6.3 | 2.9% | 2024-04-04 |
| CVE-2020-5247HTTP Response Splitting in Pumapuma · Puma · CVSS 6.5 · 2020-02-28 | 6.5 | 2.5% | 2020-02-28 |
| CVE-2016-4993CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers…Redhat · Jboss Enterprise Application Platform · 2016-09-26 | – | 2.5% | 2016-09-26 |
| CVE-2018-7830Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PLCs a…Schneider Electric SE · Embedded Web Servers in all Modicon M340, Premium, Quantum PLCs and BMXNOR0200 · 2018-11-30 | – | 2.4% | 2018-11-30 |
| CVE-2023-41834Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF SequencesApache Software Foundation · Apache Flink Stateful Functions · 2023-09-19 | – | 2.3% | 2023-09-19 |
| CVE-2007-5595CRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x before 4.7.8 and 5.x before 5.3 allows remote attackers to inject arbitrary HTTP heade…Drupal · Drupal · 2007-10-19 | – | 2.0% | 2007-10-19 |
| CVE-2026-40175Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chainaxios · axios · CVSS 4.8 · 2026-04-10 | 4.8 | 2.0% | 2026-04-10 |
| CVE-2018-1067In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP…Redhat · undertow · CVSS 5.4 · 2018-05-21 | 5.4 | 1.8% | 2018-05-21 |
| CVE-2015-1445HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30.Fli4l · Fli4l · 2017-08-28 | – | 1.8% | 2017-08-28 |
| CVE-2018-18837An issue was discovered in Netdata 1.10.0. HTTP Header Injection exists via the api/v1/data filename parameter because of web_client_api_request_v1_data in web/api/web_api_v1.c.My-Netdata · Netdata · 2019-06-18 | – | 1.8% | 2019-06-18 |
| CVE-2018-13814A vulnerability has been identified in SIMATIC HMI Comfort Panels 4" - 22" (All versions < V14), SIMATIC HMI Comfort Outdoor Panels 7" & 15" (All versions < V14), SIMATIC HMI KTP…Siemens AG · SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15… · 2018-12-13 | – | 1.7% | 2018-12-13 |
| CVE-2017-12309A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response splitting attack. The vulnerability is due t…Cisco · Cisco Email Security Appliance · 2017-11-16 | – | 1.7% | 2017-11-16 |
| CVE-2018-0689HTTP header injection vulnerability in SEIKO EPSON printers and scanners (DS-570W firmware versions released prior to 2018 March 13, DS-780N firmware versions released prior to 20…SEIKO EPSON CORPORATION · SEIKO EPSON printers and scanners · 2019-01-09 | – | 1.6% | 2019-01-09 |
| CVE-2020-5249HTTP Response Splitting (Early Hints) in Pumapuma · Puma · CVSS 6.5 · 2020-03-02 | 6.5 | 1.6% | 2020-03-02 |
| CVE-2015-0733CRLF injection vulnerability in the HTTP Header Handler in Digital Broadband Delivery System in Cisco Headend System Release allows remote attackers to inject arbitrary HTTP heade…Cisco · Headend Digital Broadband Delivery System · 2015-05-30 | – | 1.5% | 2015-05-30 |
| CVE-2020-10753A flaw was found in the Red Hat Ceph Storage RadosGW (Ceph Object Gateway). The vulnerability is related to the injection of HTTP headers via a CORS ExposeHeader tag. The newline…Red Hat · Red Hat Ceph Storage · CVSS 5.4 · 2020-06-26 | 5.4 | 1.5% | 2020-06-26 |
| CVE-2023-29406Insufficient sanitization of Host header in net/httpGo standard library · net/http · 2023-07-11 | – | 1.5% | 2023-07-11 |
| CVE-2017-1262IBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to…IBM · Security Guardium · 2017-12-20 | – | 1.3% | 2017-12-20 |
| CVE-2018-11347The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection. This flaw allows an attacker to inject, into the response from the server, one…Yunohost · Yunohost · 2018-12-04 | – | 1.3% | 2018-12-04 |
| CVE-2018-3911An exploitable HTTP header injection vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on p…Samsung · Samsung · CVSS 8.6 · 2018-08-23 | 8.6 | 1.2% | 2018-08-23 |
| CVE-2020-5216Limited header injection when using dynamic overrides with user input in RubyGems secure_headersTwitter · secure_headers · CVSS 4.4 · 2020-01-23 | 4.4 | 1.2% | 2020-01-23 |
| CVE-2026-42578Netty: HTTP Header Injection via HttpProxyHandler Disabled Validationnetty · netty · CVSS 7.5 · 2026-05-13 | 7.5 | 1.1% | 2026-05-13 |
| CVE-2019-15259Cisco Unified Contact Center Express HTTP Response Splitting VulnerabilityCisco · Cisco Unified Contact Center Express · CVSS 6.1 · 2019-10-02 | 6.1 | 1.1% | 2019-10-02 |
| CVE-2019-16771Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') in ArmeriaLINE · Armeria · CVSS 4.8 · 2019-12-06 | 4.8 | 1.0% | 2019-12-06 |
| CVE-2022-41915Netty project is an event-driven asynchronous network application framework. Starting in version 4.1.83.Final and prior to 4.1.86.Final, when calling `DefaultHttpHeadesr.set` with…netty · netty · CVSS 6.5 · 2022-12-13 | 6.5 | 1.0% | 2022-12-13 |
| CVE-2020-3117Cisco Web Security Appliance and Cisco Content Security Management Appliance HTTP Header Injection VulnerabilityCisco · Cisco Web Security Appliance (WSA) · CVSS 4.7 · 2020-09-23 | 4.7 | 0.9% | 2020-09-23 |
| CVE-2021-0268Junos OS: J-Web has an Improper Neutralization of CRLF Sequences in its HTTP Headers which allows an attacker to carry out multiple types of attacks.Juniper Networks · Junos OS · CVSS 8.8 · 2021-04-22 | 8.8 | 0.9% | 2021-04-22 |
| CVE-2019-25101OnShift TurboGears HTTP Header controllers.py response splittingOnShift · TurboGears · CVSS 6.3 · 2023-02-04 | 6.3 | 0.9% | 2023-02-04 |
| CVE-2018-16181HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks tha…Digital Arts Inc. · i-FILTER · 2019-01-09 | – | 0.8% | 2019-01-09 |
| CVE-2017-12308A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack…Cisco · Cisco Small Business 300 and 500 Series Managed Switches · 2018-01-18 | – | 0.8% | 2018-01-18 |
| CVE-2016-6839CRLF injection vulnerability in Huawei FusionAccess before V100R006C00 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via uns…Huawei · Fusionaccess · 2016-09-07 | – | 0.8% | 2016-09-07 |
| CVE-2024-54021An Improper Neutralization of CRLF Sequences in HTTP Headers ('http response splitting') vulnerability [CWE-113] in Fortinet FortiOS 7.2.0 through 7.6.0, FortiProxy 7.2.0 through…Fortinet · FortiOS · CVSS 6.4 · 2025-01-14 | 6.4 | 0.8% | 2025-01-14 |
| CVE-2023-0508Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') in GitLabGitLab · GitLab · CVSS 3.1 · 2023-06-07 | 3.1 | 0.8% | 2023-06-07 |
| CVE-2023-32708HTTP Response Splitting via the ‘rest’ SPL CommandSplunk · Splunk Enterprise · CVSS 7.2 · 2023-06-01 | 7.2 | 0.7% | 2023-06-01 |
| CVE-2017-7443apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of blocking for the %0[ad] regular expression.Apt-Cacher-Ng Project · Apt-Cacher-Ng · 2017-04-05 | – | 0.7% | 2017-04-05 |
| CVE-2024-40324A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting…Datex-Soft · E-Staff · CVSS 9.8 · 2024-07-25 | 9.8 | 0.7% | 2024-07-25 |
| CVE-2022-3215NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1 server accepts user generated input fr…Swift Project · SwiftNIO · CVSS 7.5 · 2022-09-28 | 7.5 | 0.7% | 2022-09-28 |
| CVE-2026-90819a2aproject a2a-java Authorization Header Construction BasePushNotificationSender.java BasePushNotificationSender.dispatchNotification response splittinga2aproject · a2a-java · CVSS 7.3 · 2026-09-14 | 7.3 | 0.7% | 2026-09-14 |
| CVE-2022-20772A vulnerability in Cisco Email Security Appliance (ESA) and Cisco Secure Email and Web Manager could allow an unauthenticated, remote attacker to conduct an HTTP response splittin…Cisco · Cisco Secure Email · CVSS 4.7 · 2022-11-03 | 4.7 | 0.7% | 2022-11-03 |
| CVE-2026-105324An HTTP header injection vulnerability was found in the ADMASUSTOR Inc. · ADM · CVSS 9.2 · 2026-10-07 | 9.2 | 0.7% | 2026-10-07 |
| CVE-2024-23644trillium-http and trillium-client vulnerable to HTTP Request/Response Splittingtrillium-rs · trillium · CVSS 6.8 · 2024-01-24 | 6.8 | 0.6% | 2024-01-24 |
| CVE-2025-41234RFD Attack via “Content-Disposition” Header Sourced from RequestVMware · Spring Framework · CVSS 6.5 · 2025-06-12 | 6.5 | 0.6% | 2025-06-12 |
| CVE-2017-7528Ansible Tower as shipped with Red Hat CloudForms Management Engine 5 is vulnerable to CRLF Injection. It was found that X-Forwarded-For header allows internal servers to deploy ot…Red Hat · Ansible Tower · CVSS 5.2 · 2018-08-22 | 5.2 | 0.6% | 2018-08-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.