Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-1869

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

  • Published: Apr 1, 2014
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-1869
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
redhat / spacewalk-java - 2.1.147-1.x
redhat / satellite 5.6 5.6.x