Files
CVEs-PoC/2025/CVE-2025-0825.md
T
2025-09-29 21:09:30 +02:00

877 B

CVE-2025-0825

Description

cpp-httplib version v0.17.3 through v0.18.3 fails to filter CRLF characters ("\r\n") when those are prefixed with a null byte. This enables attackers to exploit CRLF injection that could further lead to HTTP Response Splitting, XSS, and more.

POC

Reference

No PoCs from references.

Github