CVE-2022-37240

MDaemon Technologies SecurityGateway for Email Servers 8.5.2 is vulnerable to HTTP Response splitting via the format parameter.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-08-25

Last modified

2024-08-03

Weaknesses

CWE-74

Affected products

• Security Gateway For Email Servers (Altn)

References

• https://files.mdaemon.com/securitygateway/release/relnotes_en.htm
• https://gtn.com.np/wp-content/uploads/2022/07/HTTP-Response-splitting-through-format-parameter.pdf