Unscored CVE-2009-4267 EUVD-2009-4236GHSA-9fhh-gqv6-6cp4

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the…

Published Feb 19, 2018 · Updated Sep 16, 2024 · Assigned by redhat

Vendor: Apache Software Foundation Product: jUDDI

Description

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	jUDDI	3.0.0 fixed in 3.0.1	—

References

[juddi-user] 20180208 [Announce] CVE-2009-4267 - vulnerability in jUDDI 3.0.0 console. mailing-list
http://juddi.apache.org/security.html