Description
User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Symantec Identity Management And Governance | 14.3, 14.4.1, 14.4.2 | — |
Medium · 6.1
CVE-2023-23950
EUVD-2023-28015GHSA-gq33-qvc5-v66x
User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.
Published Jan 24, 2023 · Updated Apr 2, 2025 · Assigned by symantec