Vulnerability	Vulnerable Version
M HTTP Response Splitting microdot is a The impossibly small web framework for MicroPython Affected versions of this package are vulnerable to HTTP Response Splitting in the `set_cookie` function. An attacker can inject arbitrary HTTP headers by supplying malicious input containing carriage return and line feed sequences, which are then stored in a cookie by the server on behalf of the victim. Note: This is only exploitable if the attacker has already infiltrated the client, such as through a separate cross-site scripting attack, and can control the data sent to the server for cookie storage. How to fix HTTP Response Splitting? Upgrade `microdot` to version 2.6.1 or higher.	[,2.6.1)

HTTP Response Splitting

microdot is a The impossibly small web framework for MicroPython

Affected versions of this package are vulnerable to HTTP Response Splitting in the set_cookie function. An attacker can inject arbitrary HTTP headers by supplying malicious input containing carriage return and line feed sequences, which are then stored in a cookie by the server on behalf of the victim.

Note: This is only exploitable if the attacker has already infiltrated the client, such as through a separate cross-site scripting attack, and can control the data sent to the server for cookie storage.

How to fix HTTP Response Splitting?

Upgrade microdot to version 2.6.1 or higher.

[,2.6.1)

Go back to all versions of this package