CVE-2014-1956 — CRLF Injection in Fortinet Fortiweb

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.2%
top 54.87%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fortinet Fortiweb
Timeline
PublishedApr 30
Latest updateMay 17

Description

CRLF injection vulnerability in FortiGuard FortiWeb before 5.0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-g5vg-6rhr-3832: CRLF injection vulnerability in FortiGuard FortiWeb before 5↗2022-05-17
▶
CVEList
CVE-2014-1956: CRLF injection vulnerability in FortiGuard FortiWeb before 5↗2014-04-30
▶
CVE-2014-1956 — CRLF Injection in Fortinet Fortiweb | cvebase