CVE-2020-12855

A Host header injection vulnerability has been discovered in SecZetta NEProfile 3.3.11. Authenticated remote adversaries can poison this header resulting in an adversary controlling the execution flow for the 302 HTTP status...

CVE-2020-12855

CVE-2020-12855 pertains to SecZetta NEProfile 3.3.11, where a Host header injection vulnerability lets an authenticated remote attacker poison the Host header and influence the execution flow of 302 HTTP redirects. The issue affects the HTTP response handling at redirect points and could enable m...