CVE-2014-2017

Published: 2018-01-18T14:29Z

Last Modified: 2024-11-21T02:05Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt