← All advisories

Medium severity6.5NVD Advisory· Published Jul 20, 2023· Updated Jun 17, 2026

CVE-2020-24275

CVE-2020-24275

Description

A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Swoole/Swoole
cpe:2.3:a:swoole:swoole:4.5.2:*:*:*:*:*:*:*
Swoole/Swoole Srccpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <=4.5.2

Patches

Vulnerability mechanics

References

4

github.com/swoole/swoole-src/pull/3539nvdPatchVendor Advisory
github.com/swoole/swoole-src/pull/3545nvdPatchVendor Advisory
blog.cal1.cn/post/HTTP%20Response%20Header%20Injection%20in%20Swoole%3C%3D4.5.2nvdExploitThird Party Advisory
portswigger.net/kb/issues/00200200_http-response-header-injectionnvdTechnical Description

News mentions

0

No linked articles in our index yet.