What is GHSA-cm5j-986p-jqrj?

GHSA-cm5j-986p-jqrj is a security advisory published by GitHub Security Advisories with Low severity. An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')...

Which CVE IDs does GHSA-cm5j-986p-jqrj cover?

GHSA-cm5j-986p-jqrj covers the following CVE IDs: CVE-2025-62675. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cm5j-986p-jqrj?

GHSA-cm5j-986p-jqrj has a CVSS v3 base score of 3.4, published by GitHub Security Advisories.

GHSA-cm5j-986p-jqrjLowCVSS 3.4

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')...

Vendor

GitHub Security Advisories

Published

July 14, 2026

Last Modified

July 14, 2026

🔗 CVE IDs covered (1)

CVE-2025-62675 →

📋 Description

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a crafted link.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-62675
https://fortiguard.fortinet.com/psirt/FG-IR-26-152
https://github.com/advisories/GHSA-cm5j-986p-jqrj