Threats tagged 'brew-jupyterlab-ghsa-w235-7p84-xx57'

Tornado's CurlAsyncHTTPClient class in versions >=1.2.0 and <4.2.3 allows CRLF injection in HTTP request headers. This occurs because Tornado does not validate or reject carriage return and line feed characters in header values, enabling attackers to inject arbitrary headers or even additional HTTP requests. This vulnerability differs from the standard AsyncHTTPClient, which properly rejects such characters. The issue stems from libcurl and pycurl passing header strings verbatim without filtering control characters. Exploitation may facilitate server-side request forgery (SSRF) attacks. A fix is available in Tornado version 4.2.3.