| Package | Affected versions | Patched versions |
|---|---|---|
| tntnet | = 2.0= 2.1≤ 2.2 |
framework/common/messageheaderparser.cpp in Tntnet before 2.2.1 allows remote attackers to obtain sensitive information via a header that ends in \n instead of \r\n, which prevents a null terminator from being added and causes Tntnet to include headers from other requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free