Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/cfug/dio ↗ | |
| 0bf69c8ebd7e8c010345feb20034450839571eda to before 1332d3210f83b67deced437aaad9f77abb05201e | 1332d3210f83b67deced437aaad9f77abb05201e |
Also listed as affected (5)
| |
Description
The dio package 4.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a different vulnerability than CVE-2020-35669.