Description
A host header injection vulnerability in the HTTP handler component of Crafty Controller allows a remote, unauthenticated attacker to trigger a Denial of Service (DoS) condition via a modified host header
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arcadia Technology | Crafty Controller | 4.0.0 – ≤ 4.2.2 | — |
References
- GitLab Issue #327 issue-tracking