← Database

CVE-2002-1405

MEDIUM CVSS: 5.0 Published: 2003-02-19 Modified: 2026-06-16

Description

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.

Affected Platforms

Elinks ElinksLinks LinksUniversity Of Kansas Lynx

Weakness Type

NVD-CWE-Other

References