CVE-2023-23950 User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses

Description

User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Symantec Identity Management And Governance	Versions non publiées

Autres CVE de Symantec Identity Management And Governance

Les 3 CVE de Symantec Identity Management And Governance →

CVE-2023-23949 An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser 8.1 Élevée CVE-2023-23951 Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application 6.1 Moyenne