OXID eShop Enterprise Edition response splitting | CVE-2023-38330
NAME
__________
OXID eShop Enterprise Edition response splitting
Platforms Affected:
OXID eShop Enterprise Edition 6.5.0
OXID eShop Enterprise Edition 6.5.2
Risk Level:
7.5
Exploitability:
Unproven
Consequences:
Gain Access
DESCRIPTION
__________
OXID eShop Enterprise Edition is vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability by uploading files with modified headers in the administration area. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.
CVSS 3.0 Information
__________
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Access Vector:
Network
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.
