{"id":"GHSA-8qv8-fq5w-p966","aliases":["CVE-2021-4097"],"title":"phpservermon is vulnerable to CRLF Injection","description":"phpservermon is vulnerable to Improper Neutralization of CRLF Sequences.","severity":"medium","score":6.3,"published":"2021-12-16T14:26:00.000Z","modified":"2023-11-08T04:06:49.994Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"phpservermon/phpservermon","ranges":[{"events":[{"introduced":"0"},{"last_affected":"3.5.2"}],"type":"ECOSYSTEM"}],"versions":["v3.1.0","v3.1.1","v3.2.0","v3.2.0-rc1","v3.2.1","v3.2.2","v3.3.0","v3.3.1","v3.3.2","v3.4.0","v3.4.1","v3.4.2","v3.4.3","v3.4.4","v3.4.5","v3.5.0","v3.5.1","v3.5.2"],"fixed":[]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2021-4097","https://github.com/phpservermon/phpservermon/commit/162bba0046fcda1580f4fbc7b9ababe3c7c13ce4","https://github.com/phpservermon/phpservermon","https://huntr.dev/bounties/d617ced7-be06-4e34-9db0-63d45c003a43"],"sources":[{"name":"OSV","id":"GHSA-8qv8-fq5w-p966","modified":"2023-11-08T04:06:49.994219Z","url":"https://osv.dev/vulnerability/GHSA-8qv8-fq5w-p966"}],"assessments":[{"source":"OSV","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","score":6.3}]}