CVE-2016-2303 CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
MediumCVSS 5.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ecava integraxor | <= 4.2.4502 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource