← Database

CVE-2026-32993

HIGH CVSS: 8.3 Published: 2026-05-13 Modified: 2026-06-17

Description

Improper sanitization of the `status` query parameter of the `/unprotected/nova_error` endpoint allows unauthenticated attacker to inject arbitrary HTTP header to the response.

Affected Platforms

Unknown

Weakness Type

CWE-93

References