CRLF injection vulnerability in Request Tracker (RT) 3.8.x before 3.8.17 and 4.0.x before 4.0.13 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a MIME header.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2013-08-23T16:00:00Z

Updated: 2024-09-16T17:33:13.370Z

Reserved: 2013-05-06T00:00:00Z

Link: CVE-2013-3373

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2013-08-23T16:55:07.327

Modified: 2013-08-26T14:38:01.067

Link: CVE-2013-3373

cve-icon Redhat

No data.