CVE-2024-40324: Datex-Soft E-Staff

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

A CRLF injection vulnerability in E-Staff v5.1 allows attackers to insert Carriage Return (CR) and Line Feed (LF) characters into input fields, leading to HTTP response splitting and header manipulation.

Affected products

• Datex-Soft E-Staff: version 5.1 only

Published 2024-07-25. Last modified 2026-06-17.