libcurl CURLOPT_REQUEST_TARGET exposure: curl user-agent with CR/LF in request
Detects potential exploitation of the libcurl CURLOPT_REQUEST_TARGET CRLF injection vulnerability via web/proxy request logs where curl user-agents are observed with carriage return/line feed characters or injected request lines within the URI path.
Splunk (SPL)
