CVE-2016-4993

MEDIUM6.1EPSS 1.5%

Improper Neutralization of CRLF Sequences in Wildfly Undertow

發布日:2022/5/17修改日:2026/4/28
也稱為:DEBIAN-CVE-2016-4993

描述

CRLF injection vulnerability in the Undertow web server in WildFly 10.0.0, as used in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

受影響套件(2)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM6.1CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

參考連結(13)