CyberRota Analysis
AI-GeneratedRouille versions 0.4.0 through 3.6.2 are vulnerable to an HTTP response splitting flaw that permits remote attackers to inject arbitrary response headers through manipulated input. This vulnerability can lead to cache poisoning, session fixation, and the circumvention of security headers like CSP or CORS. Organizations utilizing affected Rouille versions should prioritize remediation to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Rouille 0.4.0 through 3.6.2 contains an HTTP response splitting vulnerability that allows remote attackers to inject arbitrary response headers by embedding carriage return (0x0D) or line feed (0x0A) bytes into attacker-controlled input. Attackers can exploit percent-decoded query parameters reflected into response headers or inject bare LF characters into Cookie header values that are interpolated directly into Set-Cookie response headers, enabling cache poisoning, session fixation, and security header override attacks such as bypassing CSP or CORS policies.