medium6.5
CVE-2020-6858
Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection.
Impact
Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hotels | Styx | through 0.7.10 Version 1.0.0 |