Description
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.
Remediation
References
Related Vulnerabilities
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-5379)
Oracle Database Server CVE-2015-0371 Vulnerability (CVE-2015-0371)
Plone CMS CVE-2011-0720 Vulnerability (CVE-2011-0720)
Oracle HTTP Server Other Vulnerability (CVE-2020-35166)
WordPress Plugin Google Sitemap by BestWebSoft Cross-Site Scripting (3.0.7)