WebCollab 'item' Parameter HTTP Response Splitting Vulnerability
BID:63247
Info
WebCollab 'item' Parameter HTTP Response Splitting Vulnerability
| Bugtraq ID: | 63247 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-2652 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2013 12:00AM |
| Updated: | Oct 25 2013 12:13AM |
| Credit: | Internet Security Auditors |
| Vulnerable: |
WebCollab WebCollab 2.50 WebCollab WebCollab 2.40 |
| Not Vulnerable: | |
Discussion
WebCollab 'item' Parameter HTTP Response Splitting Vulnerability
WebCollab is prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.
WebCollab is prone to an HTTP-response-splitting vulnerability because it fails to properly sanitize user-supplied input.
Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client users into a false sense of trust.
Exploit / POC
WebCollab 'item' Parameter HTTP Response Splitting Vulnerability
To exploit this issue an attacker must entice an unsuspecting victim into following a malicious URI.
To exploit this issue an attacker must entice an unsuspecting victim into following a malicious URI.
Solution / Fix
WebCollab 'item' Parameter HTTP Response Splitting Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.