CRLF injection vulnerability in Adobe ColdFusion| ID: oval:org.secpod.oval:def:9460 | Date: (C)2013-03-01 (M)2022-10-10 |
| Class: VULNERABILITY | Family: unix |
The host is installed with Adobe ColdFusion 8.0, 8.0.1, 9.0, 9.0.1 and is prone to CRLF injection vulnerability. A flaw is present in the Component Browser in Adobe ColdFusion, which fails to properly handle user supplied input. Successful exploitation allows remote attackers inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
