Cloud server privilege takeover vulnerability exploiting header injection (CRLF) in the Axios library

Rather than being a standalone vulnerability in Axios itself, a prototype pollution vulnerability in another library installed alongside it in the project serves as the starting point of the attack.

Using this as a foothold, an attacker induces CRLF header injection that manipulates request headers, which can then lead to administrator privilege takeover on cloud servers such as AWS.

The key points are as follows.

• It operates as a chain attack rather than a single vulnerability.
• Another vulnerable library must exist first.
• Axios's header injection vulnerability can be exploited as a privilege escalation path.
• The risk level is high, as the scope of impact can extend to cloud infrastructure privilege takeover.