CVE-2024-40324

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

Una vulnerabilidad de inyección CRLF en E-Staff v5.1 permite a los atacantes insertar caracteres Carriage Return (CR) y Line Feed (LF) en los campos de entrada, lo que lleva a la división de la respuesta HTTP y la manipulación del encabezado.