VYPR
Medium severity5.4NVD Advisory· Published Jul 25, 2024· Updated Jun 17, 2026

CVE-2024-40324

CVE-2024-40324

Description

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • E-Staff/E-Staffcpe-rescue2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: =5.1

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.