CVE-2021-37499

2023-01-2000:00:00

mitre

www.cve.org

cve-2021-37499

reprise license manager

crlf vulnerability

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.

References

reprise.com

reprisesoftware.com

github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md