{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-03-11T00:00:00", "descriptions": [{"lang": "en", "value": "CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-01-18T13:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.oxid-esales.com/view.php?id=5635"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://oxidforge.org/en/security-bulletin-2014-002.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-2017", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://bugs.oxid-esales.com/view.php?id=5635", "refsource": "CONFIRM", "url": "https://bugs.oxid-esales.com/view.php?id=5635"}, {"name": "https://oxidforge.org/en/security-bulletin-2014-002.html", "refsource": "CONFIRM", "url": "https://oxidforge.org/en/security-bulletin-2014-002.html"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-2017", "datePublished": "2018-01-18T14:00:00", "dateReserved": "2014-02-17T00:00:00", "dateUpdated": "2018-01-18T13:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oxidforge:eshop:*:*:*:*:professional:*:*:*", "matchCriteriaId": "B9832B3A-E424-459B-A7B3-0BA9340B19F9", "versionEndExcluding": "4.7.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxidforge:eshop:*:*:*:*:professional:*:*:*", "matchCriteriaId": "492B4045-1EF9-46AB-BEDE-DF7CFF3142D4", "versionEndExcluding": "4.8.4", "versionStartIncluding": "4.8.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oxidforge:eshop:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "9CCC0261-5936-4765-8312-1B98A1511434", "versionEndExcluding": "5.0.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxidforge:eshop:*:*:*:*:enterprise:*:*:*", "matchCriteriaId": "9D5B483E-C3B9-4F7A-951E-84E96B41C4E1", "versionEndExcluding": "5.1.4", "versionStartIncluding": "5.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:oxidforge:eshop:*:*:*:*:community:*:*:*", "matchCriteriaId": "EDE4017D-A067-4445-BFEE-57C7F7BBB751", "versionEndExcluding": "4.7.11", "vulnerable": true}, {"criteria": "cpe:2.3:a:oxidforge:eshop:*:*:*:*:community:*:*:*", "matchCriteriaId": "41A3F4A7-262F-48C8-874D-9AF25DDB939F", "versionEndExcluding": "4.8.4", "versionStartIncluding": "4.8.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n CRLF en OXID eShop Professional Edition en versiones anteriores a la 4.7.11 y versiones 4.8.x anteriores a la 4.8.4, Enterprise Edition en versiones anteriores a la 5.0.11 y versiones 5.1.x anteriores a la 5.1.4, y Community Edition en versiones anteriores a la 4.7.11 y versiones 4.8.x anteriores a la 4.8.4 permite que atacantes remotos inyecten cabeceras HTTP arbitrarias y lleven a cabo ataques de separaci\u00f3n de respuesta HTTP mediante vectores sin especificar."}], "id": "CVE-2014-2017", "lastModified": "2018-02-06T17:28:57.800", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-01-18T14:29:00.227", "references": [{"source": "cve@mitre.org", "tags": ["Issue Tracking", "Vendor Advisory"], "url": "https://bugs.oxid-esales.com/view.php?id=5635"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "https://oxidforge.org/en/security-bulletin-2014-002.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-93"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}