medium6.1
CVE-2019-10272
An issue was discovered in Weaver e-cology 9.0.
Impact
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weaver | E-Cology | Version 9.0 |