Description

The application disables the HeaderChecking property, which enables the encoding of newlines and carriage returns, thus allowing the injection of malicious headers

Impact

Ease header injection attacks through newlines and carriage returns

Recommendation

Set the EnableHeaderChecking property to true, of remove the line that sets the property in false, since its default value is true

Threat

Anonymous attacker from the Internet

Expected Remediation Time

⏱️ 20 minutes.

Requirements

Fixes