Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-20784 EUVD-2021-8196GHSA-vxfp-88g2-6m62

HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject a…

Published Jul 14, 2021 · Updated Dec 3, 2024 · Assigned by jpcert

Description

HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product.

Affected products

VendorProductAffectedFixed
voidtools Everything all versions of 1.0 (Everything 1.0 series) except the Lite version, all versions of 1.1 (Everything 1.1 series) except the Lite version, all versions of 1.2 (Everything 1.2 series) except the Lite version —

References