CVE-2016-2303
CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
- Score
- CVSS 3.0 5.3 Medium
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2016-04-22
- Last modified
- 2024-08-05
Affected products
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-105-03
