CVE-2023-52066

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published
Oct 30, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-520686.1kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.CVE-2023-520695.4kodbox v1.49.04 was discovered to contain a cross-site scripting (XSS) vulnerability via the URL parameter.CVE-2023-52078.8A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prioCVE-2023-520708.4JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: thisCVE-2023-520728.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/userconfig_updagte.CVE-2023-520738.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /system/site/config_footer_updagte.CVE-2023-520748.8FlyCms v1.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component system/site/webconfig_updagte.CVE-2023-520757.5ReVanced API proxies requests needed to feed the ReVanced Manager and website with data. Up to and including commit 71f81f7f20cd26fd707335bcCVE-2023-520767.8Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vuCVE-2023-520779.8Nexkey is a lightweight fork of Misskey v12 optimized for small to medium size servers. Prior to 12.23Q4.5, Nexkey allows external apps usinCVE-2023-520796.5msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users caCVE-2023-520807.7IEIT NF5280M6 UEFI firmware through 8.4 has a pool overflow vulnerability, caused by improper use of the gRT->GetVariable() function. Attack
CVE-2023-52066: High severity, CVSS 7.2 | Vulnix