CVE-2005-4521: CRLF Injection
CRLF injection vulnerability in Mantis 1.0.0rc3 and earlier allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks via (1) the return parameter in logincookietest.php and (2) ref parameter in loginselectprojpage.php.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4521?
CVE-2005-4521 is considered a moderate severity vulnerability due to its ability to conduct HTTP response splitting attacks.
How do I fix CVE-2005-4521?
To fix CVE-2005-4521, upgrade Mantis to a version later than 1.0.0rc3.
What versions of Mantis are affected by CVE-2005-4521?
CVE-2005-4521 affects Mantis versions 1.0.0rc3 and earlier.
What types of attacks can be conducted due to CVE-2005-4521?
CVE-2005-4521 allows remote attackers to modify HTTP headers and conduct HTTP response splitting attacks.
Which parameters are vulnerable in CVE-2005-4521?
In CVE-2005-4521, the vulnerable parameters are the return parameter in login_cookie_test.php and the ref parameter in login_select_proj_page.php.