Back to search
CVE-2018-1319
Published: Mar 15, 2018
Modified: Sep 17, 2024
PUBLISHED
Description
In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim's browsing session.
| Vendor | Product | Versions |
|---|---|---|
Apache Software Foundation | Apache Allura | affected prior to 1.8.1 |
References
[dev] 20180315 [SECURITY] CVE-2018-1319 Apache Allura HTTP response splitting
mailing-list
x_refsource_MLIST
103434
vdb-entry
x_refsource_BID
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now