Not rated
CVE-2009-4267 The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to…
Description
The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| jUDDI | Versions not published |
References
- [juddi-user] 20180208 [Announce] CVE-2009-4267 - vulnerability in jUDDI 3.0.0 console. mail-archives.apache.org
- juddi.apache.org juddi.apache.org
Timeline
- Published
- Last modified