CVE-2017-5615
published 2017-03-03CVE-2017-5615: cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
PriorityP421medium6.1CVSS 3.0
AVNACLPRNUIRSCCLILAN
EPSS
1.14%
62.5th percentile
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mit | cgiemail | >= 0 < 1.6-37+deb7u1build0.14.04.1 | 1.6-37+deb7u1build0.14.04.1 |
| mit | cgiemail | >= 0 < 1.6-37+deb7u1build0.16.04.1 | 1.6-37+deb7u1build0.16.04.1 |
CVSS provenance
nvdv3.06.1MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
osv6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-r88j-2w5r-2c6x: cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location
ghsa_unreviewed·2022-05-17
CVE-2017-5615 [MEDIUM] CWE-601 GHSA-r88j-2w5r-2c6x: cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
OSV
CVE-2017-5615: cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location
osv·2017-03-03·CVSS 6.1
CVE-2017-5615 [MEDIUM] CVE-2017-5615: cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
No detection rules found.
No public exploits indexed.
2017-03-03
Published