CVE-2013-6009: Improper Control of Generation of Code

CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet...

PT-2013-5918

Name of the Vulnerable Software and Affected Versions Open-Xchange AppSuite versions prior to 7.2.2 Description The issue allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet when AJP is used in certain conditions...