← Database

CVE-2024-40324

MEDIUM CVSS: 5.4 Published: 2024-07-25 Modified: 2026-06-17

Description

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

Affected Platforms

Datex-Soft E-Staff

Weakness Type

CWE-74, CWE-93, CWE-113

References