high7.5
CVE-2024-1064
A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Servi…
Impact
A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftycontrol | Crafty Controller | from 4.0.0 through 4.2.2 |