Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-1064

Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitLab

Description

A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arcadia Technology, LLC Crafty Controller

Default version status: unaffected

  • 4.0.0 to ≤ 4.2.2affected

References