3455 matches found
CVE-2018-19585
GitLab CE/EE versions 8.18 up to 11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1 have CRLF Injection in Project Mirroring when using the Git protocol...
CVE-2018-19585
CVE-2018-19585 covers CRLF Injection in GitLab CE/EE Project Mirroring when using the Git protocol. Affected: GitLab versions 8.18–11.x before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. The root cause is CRLF injection in mirroring requests; public material references exploitation o...
CVE-2018-19585
Removed by vendor...
python urllib CRLF injection vulnerability
Python is a widely used high-level programming language that is general-purpose, and urllib is the standard library in Python for network requests. A CRLF injection vulnerability exists in python urllib, which can be exploited by an attacker by controlling the url parameters to perform a CRLF...
Siemens WinCC and SIMATIC HMI Panels < 11.0.2.1 Multiple Vulnerabilities
Binary data 720014.prm...
CRLF Injection
httplib library used by urllib, urllib2 and others in Python is vulnerable to CRLF injection attacks. The vulnerability exists because it fails to sufficiently sanitize user input. This allows remote attackers to inject additional headers in a Python application that allowed user provided header...
CRLF Injection
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. It was found that the libcurl library did not correctly handle partial literal IP addresses when parsing received HTTP cookies. An attacker...
CRLF Injection
jenkins is vulnerable to CRLF injection. A remote attacker is able to inject arbitrary HTTP headers or perform HTTP response splitting attacks to steal user's session tokens, perform unwanted actions on behalf of the user or perform phishing attacks on users...
CRLF Injection
OpenSSH is vulnerable to CRLF injection. It was discovered that the OpenSSH server did not sanitize data received in requests to enable X11 forwarding. An authenticated client with restricted SSH access could possibly use this flaw to bypass intended restrictions...
Carriage Return And Line Feed (CRLF) Injection
Red Hat OpenShift Enterprise is a cloud computing Platform-as-a-Service PaaS solution designed for on-premise or private cloud deployments. Refer to the Red Hat OpenShift Enterprise 1.1 Release Notes for information about the changes in this release. The Release Notes will be available shortly fr...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
Crlf injection
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...
CVE-2019-10272
CVE-2019-10272 affects Weaver e-cology 9.0. A CRLF injection vulnerability exists in the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, demonstrated by the %0aSet-cookie: substring. CVSS data indicate base scores of 4.3 (CVSS2) and 6.1 (CVSS3) with network access, no authenti...
FreeBSD : buildbot -- CRLF injection in Buildbot login and logout redirect code (5536ea5f-6814-11e9-a8f7-0050562a4d7b)
A CRLF can be injected in Location header of /auth/login and /auth/logout This is due to lack of input validation in the buildbot redirection code. It was not found a way to impact Buildbot product own security through this vulnerability, but it could be used to compromise other sites hosted on t...
Carriage Return Line Feed (CRLF) Injection
urllib3 is vulnerable to Carriage Return Line Feed CRLF Injection. It is possible because it does not escape CRLF characters injected into the request parameter, allowing an attacker to manipulate the HTTP headers once the parameter is under control...
PYSEC-2019-132
In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter...