VULNERABILITY INTELLIGENCE

CVE-2002-1405

CVSS score5 MEDIUM
EPSS probability5.04%
CISA KEVNot currently listed
Published2003-02-19
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.

Primary references