In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
Exploitability
AV:N
AC:L
PR:N
UI:R
Scope
S:C
Impact
C:L
I:L
A:N
6.1/CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N