CVE-2021-41732

An issue was discovered in zeek version 4.1.0. There is a HTTP request splitting vulnerability that will invalidate any ZEEK HTTP based security analysis. NOTE: the vendor's position is that the observed behavior is intended

Score

CVSS 3.1 8.2 High

Status

Modified - cve@mitre.org

Published

2021-09-29

Last modified

2024-08-04

Weaknesses

CWE-444

Affected products

• Zeek (Zeek)

References

• https://github.com/zeek/zeek/issues/1798