Към съдържанието
Търсене

CVE-2026-12143: form-data, инжекция

8.7

CVSS 4.0

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: има публичен пример за експлоатация
  • Атаката може да се автоматизира

Описание

Оригинално описание

form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header without escaping carriage return (CR), line feed (LF), or double-quote (") characters. An application that passes attacker-controlled data as a field name or filename (for example, an API gateway that turns JSON object keys into multipart field names) allows the attacker to terminate the header line and inject additional headers, or to smuggle entire additional multipart parts, into the request the application forwards to a backend. This can let the attacker add or override form fields (e.g. set `is_admin=true`) seen by the downstream parser. This is an instance of CWE-93 (CRLF injection). The fix escapes CR, LF, and `"` as `%0D`, `%0A`, and `%22` in field names and filenames, matching the serialization browsers use per the WHATWG HTML multipart/form-data encoding algorithm. Exploitation requires the consuming application to use untrusted input as a field name or filename; applications that use only fixed/trusted field names are not affected. Fixed in 2.5.6, 3.0.5, and 4.0.6.

Засегнати продукти

  • form-data form-data: преди 2.5.6; 3.0.0 преди 3.0.5; 4.0.0 преди 4.0.6
  • Red Hat Cryostat 4 on RHEL 9: 4.2.0-13 преди *
  • Red Hat Red Hat AMQ Broker 7.13.6
  • Red Hat Red Hat AMQ Broker 7.14.1
  • Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9: 0:2.6.13-1.el9ap преди *
  • Red Hat Red Hat Data Grid 8.6.2
  • Red Hat Red Hat Enterprise Linux 10: 0:1.1.2-1.el10_2 преди *
  • Red Hat Cluster Observability Operator 1.5.0: 1782840519 преди *
  • Red Hat multicluster engine for Kubernetes 2.1: 1787079364 преди *
  • Red Hat multicluster engine for Kubernetes 2.11: 1787065052 преди *
  • Red Hat multicluster engine for Kubernetes 2.6: 1787264250 преди *
  • Red Hat multicluster engine for Kubernetes 2.8: 1787259048 преди *
  • Red Hat multicluster engine for Kubernetes 2.9: 1787079359 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11: 1787687062 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13: 1787339249 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14: 1787339248 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15: 1787341780 преди *
  • Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16: 1787339213 преди *
  • Red Hat Red Hat Advanced Cluster Security 4.9: 1783357116 преди *
  • Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10: 1783357140 преди *
  • Red Hat Red Hat Ansible Automation Platform 2.1: 1787047114 преди *
  • Red Hat Red Hat Ansible Automation Platform 2.2: 1788943531 преди *
  • Red Hat Red Hat Ansible Automation Platform 2.6: 1787219751 преди *
  • Red Hat Red Hat Ansible Automation Platform 2.7: 1787218409 преди *
  • Red Hat Red Hat Developer Hub 1.10: 1783448184 преди *
  • Red Hat Red Hat Developer Hub 1.9: 1784210921 преди *
  • Red Hat Red Hat Migration Toolkit 1.8: 1783690532 преди *
  • Red Hat Red Hat Migration Toolkit for Applications 8.1: 1785169013 преди *
  • Red Hat Red Hat OpenShift AI 3.4: 1787347991 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.19: 1788318661 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.20: 1784724699 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.21: 1784713741 преди *
  • Red Hat Red Hat OpenShift Container Platform 4.22: 1785230147 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.18: 1786705347 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.19: 1786701839 преди *
  • Red Hat Red Hat Openshift Data Foundation 4.20: 1786627460 преди *
  • Red Hat Red Hat OpenShift Dev Spaces 3.29: 1785245777 преди *
  • Red Hat Red Hat OpenShift Dev Spaces 3.30: 1787762793 преди *
  • Red Hat Red Hat OpenShift Service Mesh 2.6: 1781937133 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.0: 1782201894 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.1: 1782201696 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.2: 1782201851 преди *
  • Red Hat Red Hat OpenShift Service Mesh 3.3: 1782231869 преди *
  • Red Hat Red Hat Quay 3.10: 1783750447 преди *
  • Red Hat Red Hat Quay 3.12: 1783751865 преди *; 1784353904 преди *
  • Red Hat Red Hat Quay 3.15: 1784351966 преди *
  • Red Hat Red Hat Quay 3.16: 1783955846 преди *
  • Red Hat Red Hat Quay 3.9: 1784125838 преди *
  • Red Hat Red Hat Satellite 6.18: 1788322243 преди *
  • Red Hat Red Hat Satellite 6.19: 1788260941 преди *
  • Red Hat Cryostat 4
  • Red Hat Migration Toolkit for Applications 8
  • Red Hat Network Observability Operator
  • Red Hat Node HealthCheck Operator
  • Red Hat OpenShift Pipelines
  • Red Hat OpenShift Service Mesh 3
  • Red Hat Red Hat 3scale API Management Platform 2
  • Red Hat Red Hat Ansible Automation Platform 2
  • Red Hat Red Hat build of Apache Camel for Spring Boot 4
  • Red Hat Red Hat build of Apache Camel - HawtIO 4
  • Red Hat Red Hat build of Apicurio Registry 3
  • Red Hat Red Hat Build of Podman Desktop
  • Red Hat Red Hat Build of Podman Desktop - Tech Preview
  • Red Hat Red Hat Discovery 2
  • Red Hat Red Hat Enterprise Linux 7
  • Red Hat Red Hat Enterprise Linux 8
  • Red Hat Red Hat Enterprise Linux 9
  • Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat Hardened Images
  • Red Hat Red Hat JBoss Enterprise Application Platform 7
  • Red Hat Red Hat JBoss Enterprise Application Platform 8
  • Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat Red Hat OpenShift AI (RHOAI)
  • Red Hat Red Hat OpenShift Container Platform 4
  • Red Hat Red Hat OpenShift GitOps
  • Red Hat Red Hat OpenShift Virtualization 4
  • Red Hat Red Hat Satellite 6
  • Red Hat Red Hat Trusted Artifact Signer
  • Red Hat Red Hat Trusted Profile Analyzer

Вид слабост

История

  • 12 юни 2026 Публикувано

Други уязвимости в form-data form-data

Първоизточници

CVE-2026-12143: form-data, инжекция | freedomonline.bg