A CRLF injection vulnerability has been found in ManageEngine Desktop Central affecting version 9.1.0. This vulnerability could allow a remote attacker to inject arbitrary HTTP headers and perform HTTP response splitting attacks via the fileName parameter in /STATE_ID/1613157927228/InvSWMetering.csv.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: INCIBE

Published: 2023-11-03T10:41:24.845Z

Updated: 2024-09-05T13:59:18.678Z

Reserved: 2023-09-05T11:46:01.204Z

Link: CVE-2023-4767

cve-icon Vulnrichment

Updated: 2024-08-02T07:37:59.867Z

cve-icon NVD

Status : Analyzed

Published: 2023-11-03T11:15:08.333

Modified: 2023-11-13T18:28:04.470

Link: CVE-2023-4767

cve-icon Redhat

No data.