Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8qh-rq5m-7q5m

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters.

CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters.

EPSS

Процентиль: 47%
0.00245
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
больше 12 лет назад

CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters.

EPSS

Процентиль: 47%
0.00245
Низкий

Дефекты

CWE-94