CyberRota Analysis
AI-GeneratedThe vulnerability affects the Sanic web server/framework, allowing attacker-controlled data to be injected into HTTP response headers due to improper handling of carriage-return and line-feed characters. This can lead to serious security issues, including session fixation, cache poisoning, and corruption of security headers. Developers and organizations using affected versions should prioritize upgrading to versions 24.12.1 or 25.12.1 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Sanic is an opensource python web server/framework. Prior to version 24.12.1, and in version 25.12.0, the HTTP/1.1 response pipeline in sanic/response/types.py serializes response header names and values without rejecting carriage-return or line-feed characters. Applications that place attacker-controlled data in response.headers, file(..., filename=...), or cookie path and domain attributes can therefore emit injected headers and may split responses. Depending on application and proxy behavior, this can enable session fixation through injected cookies, cache poisoning, or security-header corruption. This issue is fixed in versions 24.12.1 and 25.12.1.