CRLF Injection Vulnerability in Request Tracker by Best Practical
CVE-2013-3373

Currently unrated

Key Information:

Vendor

Bestpractical

Status
Rt
Vendor
CVE Published:
23 August 2013

What is CVE-2013-3373?

The vulnerability in Request Tracker versions 3.8.x prior to 3.8.17 and 4.0.x prior to 4.0.13 permits remote attackers to inject harmful HTTP headers through manipulation of MIME headers. This can lead to HTTP response splitting attacks, potentially compromising web session integrity and impacting application security.

References

http://lists.bestpractical.com/pipermail/rt-announce/2013...
mailing-listx_refsource_MLIST
http://lists.bestpractical.com/pipermail/rt-announce/2013...
mailing-listx_refsource_MLIST
http://lists.bestpractical.com/pipermail/rt-announce/2013...
mailing-listx_refsource_MLIST

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.