Security Advisory

CVE-2016-4803

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-06-30 17:00:00
Last updated 2024-08-06 00:39:26
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject.