CVE-2025-53007

arduino-esp32 provides an Arduino core for the ESP32. Versions prior to 3.3.0-RC1 and 3.2.1 contain a HTTP Response Splitting vulnerability. The `sendHeader` function takes arbitrary input for the HTTP header name and value, concatenates them into an HTTP header line, and appends this to the outgoing HTTP response headers. There is no validation or sanitization of the `name` or `value` parameters before they are included in the HTTP response. If an attacker can control the input to `sendHeader` (either directly or indirectly), they could inject carriage return (`\r`) or line feed (`\n`) characters into either the header name or value. This could allow the attacker to inject additional headers, manipulate the structure of the HTTP response, potentially inject an entire new HTTP response (HTTP Response Splitting), and/or ause header confusion or other HTTP protocol attacks. Versions 3.3.0-RC1 and 3.2.1 contain a fix for the issue.

• CWE-113

• https://github.com/espressif/arduino-esp32/blob/9e61fa7e4bce59c05cb17c15b11b53b9bafca077/libraries/WebServer/src/WebServer.cpp#L504-L521
• https://github.com/espressif/arduino-esp32/blob/9e61fa7e4bce59c05cb17c15b11b53b9bafca077/libraries/WebServer/src/WebServer.cpp#L577-L582
• https://github.com/espressif/arduino-esp32/commit/21640ac82a1bb5efa8cf0b3841be1ac80add6785
• https://github.com/espressif/arduino-esp32/security/advisories/GHSA-5476-9jjq-563m

Published

Jun 26, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-53001Rejected reason: Reason: This candidate was issued in error.
• CVE-2025-53002LLaMA-Factory is a tuning library for large language models.…9.8
• CVE-2025-53003The Janssen Project is an open-source identity and access ma…8.2
• CVE-2025-53004DataEase is an open source business intelligence and data vi…9.8
• CVE-2025-53005DataEase is an open source business intelligence and data vi…9.8
• CVE-2025-53006DataEase is an open source business intelligence and data vi…9.8
• CVE-2025-53008GLPI stands for Gestionnaire Libre de Parc Informatique is a…6.5
• CVE-2025-53009MaterialX is an open standard for the exchange of rich mater…7.5
• CVE-2025-5301ONLYOFFICE Docs (DocumentServer) in versions equal and below…6.1
• CVE-2025-53010MaterialX is an open standard for the exchange of rich mater…7.5
• CVE-2025-53011MaterialX is an open standard for the exchange of rich mater…7.5
• CVE-2025-53012MaterialX is an open standard for the exchange of rich mater…7.5