CVE-2022-24775

7.5

HIGHCVSS v3

Published

March 21, 2022

CVSS v2

5 MEDIUM

Affected

4 projects

Assigned by

GitHub

Severity scale

010

Description

guzzlehttp/psr7 is a PSR-7 HTTP message library. Versions prior to 1.8.4 and 2.1.1 are vulnerable to improper header parsing. An attacker could sneak in a new line character and pass untrusted values. The issue is patched in 1.8.4 and 2.1.1. There are currently no known workarounds.

guzzle/psr7

GitHubPSR-7 HTTP message library

>= 2.0.0, < 2.1.1, < 1.8.4NVD

drupal/drupal

GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.

>= 9.3.0, < 9.3.9, >= 8.0.0, < 9.2.16NVD

drupal

More on this CVE

NVD↗GitHub Advisory↗

RubyGems

Coming Soon! This gem is in development - Dont use it, Drupal integration with rails app

>= 9.3.0, < 9.3.9, >= 8.0.0, < 9.2.16NVD

drupal

NPMImplementation of parts of Drupal’s user/access control API.

>= 9.3.0, < 9.3.9, >= 8.0.0, < 9.2.16NVD

Security Advisories

CVE-2022-24775

Description

More on this CVE