Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-6175

CRLF Injection in DECE Software's Geodi

Description

Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability in DECE Software Geodi allows HTTP Request Splitting. This issue affects Geodi: before GEODI Setup 9.0.146.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DECE Software Geodi

Default version status: unaffected

  • 0 to < GEODI Setup 9.0.146affected

References