Description
CRLF injection vulnerability in Cogent DataHub 7.1.2 and earlier, Cascade DataHub 6.4.20 and earlier, and OPC DataHub 6.4.20 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Advisories 1
- ICSA-12-016-01 Cogent DataHub XSS and CRLF CISA ICS & IT advisories · Jun 9, 2025
References
- 51375 vdb-entry
- http://www.cogentdatahub.com/ReleaseNotes.html
- cogentdatahub-unspecified-header-injection(72306) vdb-entry
- http://www.us-cert.gov/control_systems/pdf/ICSA-12-016-01.pdf
- 47525 third-party-advisory
- JVN#63249231 third-party-advisory
- JVNDB-2012-000002 third-party-advisory
- 47496 third-party-advisory