Back to search
CVE-2025-0825
Published: Feb 4, 2025
Modified: May 23, 2025
PUBLISHED
Description
cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.
| Vendor | Product | Versions |
|---|---|---|
Unknown | cpp-httplib | affected v0.17.3 - <= v0.18.3 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now