exploitDog

CVE-2018-16181

Опубликовано: 09 янв. 2019

Источник: nvd

CVSS3: 6.1

CVSS2: 5.8

EPSS Низкий

Описание

HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks that may result in an arbitrary script injection or setting an arbitrary cookie values via unspecified vectors.

Ссылки

https://download.daj.co.jp/user/ifilter/V9/
Permissions Required
Vendor Advisory
https://jvn.jp/en/jp/JVN32155106/index.html
Third Party Advisory
https://download.daj.co.jp/user/ifilter/V9/
Permissions Required
Vendor Advisory
https://jvn.jp/en/jp/JVN32155106/index.html
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:daj:i-filter:*:*:*:*:*:*:*:*

Версия до 9.50r05 (включая)

EPSS

Процентиль: 50%

0.00272

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-113

Связанные уязвимости

GHSA-x4fr-465j-hpj9

CVSS3: 6.1

github

больше 3 лет назад

HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks that may result in an arbitrary script injection or setting an arbitrary cookie values via unspecified vectors.

EPSS

Процентиль: 50%

0.00272

Низкий

6.1 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-113