Non notée
CVE-2009-4267 The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to…
Description
The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jUDDI | Versions non publiées |
Références
- [juddi-user] 20180208 [Announce] CVE-2009-4267 - vulnerability in jUDDI 3.0.0 console. mail-archives.apache.org
- juddi.apache.org juddi.apache.org
Chronologie
- Publiée
- Dernière modification