CVE-2002-1405

MEDIUM · CVSS 5 EPSS 5.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2003-02-19 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2002-1405

Severity

MEDIUM

CVSS

EPSS

5.04%

Original Filing — NVD Description

CRLF injection vulnerability in Lynx 2.8.4 and earlier allows remote attackers to inject false HTTP headers into an HTTP request that is provided on the command line, via a URL containing encoded carriage return, line feed, and other whitespace characters.