CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zend Framework before 1.12.12, 2.x before 2.3.8, and 2.4.x before 2.4.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the header of an email.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://framework.zend.com/security/advisory/ZF2015-04 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2020-01-27T15:02:12
Updated: 2024-08-06T05:39:31.844Z
Reserved: 2015-04-10T00:00:00
Link: CVE-2015-3154
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-01-27T16:15:11.063
Modified: 2024-11-21T02:28:47.377
Link: CVE-2015-3154
Redhat
No data.