Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:29:02 +0000 CVE-2023-41834 — Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences https://cve.radiocsirt.org/vuln/cve-2023-41834 <p><strong>Affected:</strong> Apache Software Foundation Apache Flink Stateful Functions</p> <p>Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user&#39;s browser.</p> <p>Users should upgrade to Apache Flink Stateful Functions version 3.3.0.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Flink Stateful Functions</p> <p>Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user&#39;s browser.</p> <p>Users should upgrade to Apache Flink Stateful Functions version 3.3.0.</p> https://cve.radiocsirt.org/vuln/cve-2023-41834