CRLF injection vulnerability in Open-Xchange AppSuite prior to 7.2.2, when using AJP in certain conditions, allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
open-xchange open-xchange appsuite |
||
open-xchange open-xchange appsuite 7.2.0 |
||
open-xchange open-xchange appsuite 6.20.7 |
||
open-xchange open-xchange appsuite 7.0.1 |
||
open-xchange open-xchange appsuite 6.22.0 |
||
open-xchange open-xchange appsuite 7.0.2 |
||
open-xchange open-xchange appsuite 6.22.1 |
Vulmon