Back to Database
Status published
High
CVE-2020-11709
cpp-httplib through 0.5.8 does not filter \r\n in parameters passed...
Vulnerability Description
cpp-httplib through 0.5.8 does not filter \r\n in parameters passed into the set_redirect and set_header functions, which creates possibilities for CRLF injection and HTTP response splitting in some specific contexts.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11709
Credits & Attribution
No credits recorded in the NVD database.
References
More from yhirose
View All →CVE-2025-66577
cpp-httplib Untrusted HTTP Header Handling: X-Forwarded-For/X-Real-IP Trust
Medium
5.3
CVE-2025-66570
cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE*/LOCAL*)
Critical
10
CVE-2025-53629
cpp-httplib Unbounded Memory Allocation in Chunked/No-Length Requests Vulnerability
High
7.5
CVE-2025-53628
cpp-httplib does not limit the length of a line
Medium
6.3
CVE-2025-52887
cpp-httplib has unlimited number of http header fields, which causes memory leak
High
7.5
Affected Vendor
yhirose
View all reports →Affected Software
cpp-httplib
Vulnerable Versions:
0
Timeline
Official Publish:
April 12th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.