exploitDog

CVE-2013-1869

Опубликовано: 10 фев. 2014

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2013-1869
https://nvd.nist.gov/vuln/detail/CVE-2013-1869

Дополнительная информация

Статус:

Moderate

https://bugzilla.redhat.com/show_bug.cgi?id=923464Satellite/Spacewalk: header injection flaw

EPSS

Процентиль: 77%

0.0185

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2013-1869

nvd

больше 12 лет назад

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

GHSA-9c7m-xg64-cvv7

github

около 4 лет назад

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

EPSS

Процентиль: 77%

0.0185

Низкий

4.3 Medium

CVSS2