Security Advisory
CVE-2016-4803
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject.