A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: INCIBE
Published: 2023-11-03T10:41:24.845Z
Updated: 2024-09-05T13:59:18.678Z
Reserved: 2023-09-05T11:46:01.204Z
Link: CVE-2023-4767
Vulnrichment
Updated: 2024-08-02T07:37:59.867Z
NVD
Status : Analyzed
Published: 2023-11-03T11:15:08.333
Modified: 2023-11-13T18:28:04.470
Link: CVE-2023-4767
Redhat
No data.