Crlf injection

2023-01-2012:15:00

PRIOn knowledge base

www.prio-n.com

crlf vulnerability

rlm web interface

remote attackers

http headers

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.7%

JSON

CRLF vulnerability in Reprise License Manager (RLM) web interface through 14.2BL4 in the password parameter in View License Result function, that allows remote attackers to inject arbitrary HTTP headers.

CPENameOperatorVersion
reprise_license_managereq<= 14.2bl4

CPE	Name	Operator	Version
	reprise_license_manager	eq	<= 14.2bl4

References

reprise.com

reprisesoftware.com

github.com/blakduk/Advisories/blob/main/Reprise%20License%20Manager/README.md