Description (CNA)
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.weaver.com.cn/cs/securityDownload.asp
- https://expzh.com/Weaver-e-cology9.0-CRLF-Injection.pdf
ADP enrichment
No English description supplied.