CWE-443 - DEPRECATED: HTTP response splitting

Home/CWEs/CWE info/

CWE-443

Abstraction:
Base

Structure:
Simple

Status:
Deprecated

Weakness Name: DEPRECATED: HTTP response splitting

Description: This weakness can be found at CWE-113.

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

New botnet exploits vulnerabilities in NVRs, TP-Link routers

Too Much 'Trust,' Not Enough 'Verify'

FBI links North Korean hackers to $308 million crypto heist

Trump 2.0 Portends Big Shift in Cybersecurity Policies

DNSSEC Denial-of-Service Attacks Show Technology's Fragility

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Clop ransomware is now extorting 66 Cleo data-theft victims

Common Alerts

InformationalUser Controllable JavaScript Event (XSS)

HighCross-Domain Misconfiguration - Adobe - Read

InformationalInformation Disclosure - Suspicious Comments in XML via WebSocket

LowDeprecated Feature Policy Header Set

MediumSub Resource Integrity Attribute Missing

MediumCSP: script-src unsafe-hashes

HighASP.NET ViewState Integrity

InformationalInformation Disclosure - Information in Browser localStorage

HighExternal Redirect

InformationalObsolete Content Security Policy (CSP) Header Found

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-695 Use of Low-Level Functionality

CWE-782 Exposed IOCTL with Insufficient Access Control

MediumCWE-1275 Sensitive Cookie with Improper SameSite Attribute

HighCWE-805 Buffer Access with Incorrect Length Value

CWE-589 Call to Non-ubiquitous API

CWE-792 Incomplete Filtering of One or More Instances of Special Elements

CWE-177 Improper Handling of URL Encoding (Hex Encoding)

CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory

CWE-1233 Security-Sensitive Hardware Controls with Missing Lock Bit Protection

CWE-757 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-443 - DEPRECATED: HTTP response splitting

This weakness can be found at CWE-113.