CVE-2012-4023

Опубликовано: 08 нояб. 2012

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:simon_brown:pebble:*:*:*:*:*:*:*:*

Версия до 2.6.3 (включая)

cpe:2.3:a:simon_brown:pebble:1.0:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.2:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.3:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.4:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.4:beta1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.4:beta2:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.4:beta3:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.4.2:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.5:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.5:beta1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.5:beta2:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.5.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.6:beta3:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.7:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.7:beta1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.8:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:1.9:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0.0:m1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0.0:m2:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0.0:m3:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0.0:rc1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0.0:rc2:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.1:rc1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.2:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.3:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.4:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.4:rc2:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5:m1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5:m2:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5:rc1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5.2:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.5.3:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.6:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.6:m1:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.6.1:*:*:*:*:*:*:*

cpe:2.3:a:simon_brown:pebble:2.6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 50%

0.00274

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-mg76-63w4-x6ch

github

больше 3 лет назад