EUVD-2019-2275

Malware in sbrugna...

CVE-2019-10272

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...

Crlf injection

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...

CVE-2019-10272

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...

CVE-2019-10272

CVE-2019-10272 affects Weaver e-cology 9.0. A CRLF injection vulnerability exists in the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, demonstrated by the %0aSet-cookie: substring. CVSS data indicate base scores of 4.3 (CVSS2) and 6.1 (CVSS3) with network access, no authenti...

PT-2019-11676

Name of the Vulnerable Software and Affected Versions Weaver e-cology version 9.0 Description A CRLF Injection issue was found, which can be exploited via the "isintervenor" parameter in the /workflow/request/ViewRequestForwardSPA.jsp endpoint. This is demonstrated by the use of the %0aSet-cookie...

CVE-2019-10272: Improper Neutralization of CRLF Sequences

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...