Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2012-2374
5
MEDIUMCVSS v2
Published
May 23, 2012
Affected
1 project
Assigned by
Red Hat
Severity scale
010
Description
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input.
tornadoweb/tornado
GitHubTornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.
GitHubTornado is a Python web framework and asynchronous networking library, originally developed at FriendFeed.= 1.1, = 2.1, = 2.0, = 1.0, = 1.2.1, = 1.1.1, = 1.0.1, <= 2.2, = 1.2, = 2.1.1, < 2.2.1NVD