Lucene search
GoogleOSV:GHSA-5XM9-RF63-WJ7HHistoryMay 17, 2022 - 5:18 a.m.
Improper Control of Generation of Code in Spring Security
2022-05-1705:18:15
Google
osv.dev
31
spring security
code generation
crlf injection
http headers
response splitting
EPSS
0.002
Percentile
58.8%
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
Related
packetstorm
packetstorm
Spring Security Header Injection
2011-09-09 00:00:00
cvelist
cvelist
CVE-2011-2732
2012-12-05 17:00:00
securityvulns
securityvulns
CVE-2011-2732: Spring Security header injection vulnerability
2011-09-13 00:00:00
nvd
nvd
CVE-2011-2732
2012-12-05 17:55:01
github
github
Improper Control of Generation of Code in Spring Security
2022-05-17 05:18:15
ubuntucve
ubuntucve
CVE-2011-2732
2012-12-05 00:00:00
prion
prion
Crlf injection
2012-12-05 17:55:00
exploitdb
exploitdb
Spring Security - HTTP Header Injection
2011-09-09 00:00:00
cve
cve
CVE-2011-2732
2012-12-05 17:55:01