Crlf injection

2016-06-3017:59:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.3%

JSON

CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject.

CPENameOperatorVersion
dotcmsle3.3.1

CPE	Name	Operator	Version
	dotcms	le	3.3.1

References

seclists.org/fulldisclosure/2016/May/69

www.securityfocus.com/bid/91529

dotcms.com/docs/latest/change-log

security.elarlang.eu/cve-2016-4803-dotcms-email-header-injection-vulnerability-full-disclosure.html