NVD

Id
20351  
Name
CVE-2016-4803  
Description
CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-06-30  
Modified Date
2016-11-28  
Seq
2016-4803  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
111248 20351 CVE-2016-4803 20160525 CVE-2016-4803 dotCMS - Email Header Injection  View
111249 20351 CVE-2016-4803 91529  View
111250 20351 CVE-2016-4803 https://dotcms.com/docs/latest/change-log#release-3.3.2  View
111251 20351 CVE-2016-4803 https://security.elarlang.eu/cve-2016-4803-dotcms-email-header-injection-vulnerability-full-disclosure.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2606 JVNDB-2016-003379 dotCMS の電子メール送信機能における CRLF インジェクションの脆弱性 dotCMS の電子メール送信機能には、CRLF インジェクションの脆弱性が存在します。 CVE-2016-4803 91309 CVE-2016-4803 20351 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003379.html 2016-05-10 2016-07-04 View