A newly disclosed CRLF header injection vulnerability, often treated as a low-impact flaw, can be exploited to enable HTTP ...