Lucene search

PRIOn knowledge basePRION:CVE-2013-2652

HistoryNov 02, 2013 - 6:55 p.m.

Crlf injection

2013-11-0218:55:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

74.9%

JSON

CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.

CPENameOperatorVersion
webcollabeq1.70
webcollabeq1.31
webcollabeq1.40
webcollable3.30
webcollabeq2.00
webcollabeq1.62.97
webcollabeq1.71.97
webcollabeq1.81
webcollabeq2.71
webcollabeq2.61

Name	Operator	Version
webcollab	eq	1.70
webcollab	eq	1.31
webcollab	eq	1.40
webcollab	le	3.30
webcollab	eq	2.00
webcollab	eq	1.62.97
webcollab	eq	1.71.97
webcollab	eq	1.81
webcollab	eq	2.71
webcollab	eq	2.61

Rows per page:

1-10 of 371

References

archives.neohapsis.com/archives/bugtraq/2013-10/0117.html

osvdb.org/98768

packetstormsecurity.com/files/123771/WebCollab-3.30-HTTP-Response-Splitting.html

secunia.com/advisories/55235

secunia.com/advisories/55295

sourceforge.net/p/webcollab/mailman/message/31536457/

www.securityfocus.com/bid/63247

exchange.xforce.ibmcloud.com/vulnerabilities/88177

7.4 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.005 Low

EPSS

Percentile

74.9%

JSON

Related for PRION:CVE-2013-2652