Description (CNA)
OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area. An attacker can upload a file with a modified header to create a HTTP Response Splitting attack.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://bugs.oxid-esales.com/view.php?id=7479
- https://docs.oxid-esales.com/de/security/security-bulletins.html#security-bulletin-2023-002
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.