| Package | Affected versions | Patched versions |
|---|---|---|
| elinks | = 0.2.4= 0.3.2 | |
| links | = 0.96 | |
| lynx | = 2.8.2_rel1= 2.8.3= 2.8.3_rel1= 2.8.4= 2.8.4_rel1= 2.8.5_dev8 |
CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free