CVE-2013-6009

2013-10-0319:00:00

mitre

www.cve.org

open-xchange appsuite

crlf injection

http response splitting

AI Score

Confidence

Low

EPSS

0.001

Percentile

48.8%

JSON

CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet.

References

www.securityfocus.com/archive/1/528940