CVE-2013-2582: Code Injection
First published: Thu Sep 05 2013(Updated: )
CRLF injection vulnerability in the redirect servlet in Open-Xchange AppSuite and Server before 6.22.0 rev15, 6.22.1 before rev17, 7.0.1 before rev6, and 7.0.2 before rev7 allows remote attackers to inject arbitrary HTTP headers and conduct open redirect attacks by leveraging improper sanitization of whitespace characters.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Open-Xchange App Suite Backend | =6.22.0 | |
| Open-Xchange App Suite Backend | =6.22.1 | |
| Open-Xchange App Suite Backend | =7.0.1 | |
| Open-Xchange App Suite Backend | =7.0.2 | |
| SUSE Linux Openexchange Server | =6.22.0 | |
| SUSE Linux Openexchange Server | =6.22.1 | |
| SUSE Linux Openexchange Server | =7.0.1 | |
| SUSE Linux Openexchange Server | =7.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2013-2582?
CVE-2013-2582 is classified as a medium severity vulnerability due to the potential for open redirect attacks.
How do I fix CVE-2013-2582?
To fix CVE-2013-2582, upgrade Open-Xchange AppSuite or Server to version 6.22.0 rev15, 6.22.1 rev17, 7.0.1 rev6, or 7.0.2 rev7 or later.
What types of attacks can exploit CVE-2013-2582?
CVE-2013-2582 can be exploited to conduct arbitrary HTTP header injection and open redirect attacks.
Which versions of Open-Xchange are affected by CVE-2013-2582?
CVE-2013-2582 affects Open-Xchange AppSuite and Server versions earlier than 6.22.0 rev15, 6.22.1 rev17, 7.0.1 rev6, and 7.0.2 rev7.
Who can be affected by CVE-2013-2582?
Organizations using vulnerable versions of Open-Xchange AppSuite or Server are at risk of attack due to CVE-2013-2582.
- agent/weakness
- agent/type
- agent/author
- agent/references
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/open-xchange
- canonical/open-xchange app suite backend
- version/open-xchange app suite backend/6.22.0
- version/open-xchange app suite backend/6.22.1
- version/open-xchange app suite backend/7.0.1
- version/open-xchange app suite backend/7.0.2
- canonical/suse linux openexchange server
- version/suse linux openexchange server/6.22.0
- version/suse linux openexchange server/6.22.1
- version/suse linux openexchange server/7.0.1
- version/suse linux openexchange server/7.0.2