medium6.1
CVE-2018-1319
In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting.
Impact
In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim's browsing session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Allura | through 1.8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/103434
- https://lists.apache.org/thread.html/22b74bc4002091157ec2bddf9fa3b7643ffaa77aa6cb85562f0e30da%40%3Cdev.allura.apache.org%3E
- http://www.securityfocus.com/bid/103434
- https://lists.apache.org/thread.html/22b74bc4002091157ec2bddf9fa3b7643ffaa77aa6cb85562f0e30da%40%3Cdev.allura.apache.org%3E