Unscored CVE-2012-4023 EUVD-2012-3967GHSA-mg76-63w4-x6ch

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spli…

Published Nov 8, 2012 · Updated Aug 6, 2024 · Assigned by jpcert

Description

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

References

JVN#39563771 third-party-advisory
51102 third-party-advisory
JVNDB-2012-000099 third-party-advisory