Crlf injection

2019-04-3018:29:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

JSON

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.

CPENameOperatorVersion
e-cologyeq9.0

CPE	Name	Operator	Version
	e-cology	eq	9.0

References

expzh.com/Weaver-e-cology9.0-CRLF-Injection.pdf

www.weaver.com.cn/cs/securityDownload.asp