Description
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.
Remediation
References
Related Vulnerabilities
WordPress Plugin Polylang Cross-Site Scripting (1.5.1)
WordPress Plugin Weather for us-animated weather widget Crypto Mining (1.8)
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.14)
Oracle JRE CVE-2023-21954 Vulnerability (CVE-2023-21954)
WordPress Plugin fitness calculators Cross-Site Request Forgery (1.9.5)