ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: redhat

Published: 2014-09-30T14:00:00

Updated: 2014-10-06T13:57:01

Reserved: 2012-10-24T00:00:00


Link: CVE-2012-5486

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2014-09-30T14:55:05.843

Modified: 2023-02-13T04:36:14.770


Link: CVE-2012-5486

JSON object: View

cve-icon Redhat Information

No data.