Filtered by vendor Datex-soft Subscriptions
Filtered by product E-staff Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-40324 1 Datex-soft 1 E-staff 2024-11-21 9.8 Critical
A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.