CVE-2024-40324

5.4 mediumEPSS 0.7%

Medium (5.4) in datex-soft e-staff. EPSS 0.7% chance of exploitation in the next 30 days.

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-93, CWE-113
Published: 2024-07-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

datex-soft:e-staff

References

https://github.com/aleksey-vi/CVE-2024-40324
https://github.com/aleksey-vi/CVE-2024-40324

Check your stack JSON