CVE-2018-11347: High severity YunoHost YunoHost vulnerability
The YunoHost 2.7.2 through 2.7.14 web application is affected by one HTTP Response Header Injection. This flaw allows an attacker to inject, into the response from the server, one or several HTTP Header. It requires an interaction with the user to send him the malicious link. It could be used to perform other attacks such as user redirection to a malicious website, HTTP response splitting, or HTTP cache poisoning.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11347?
CVE-2018-11347 has a medium severity rating due to its potential to compromise user data through HTTP header injection.
How do I fix CVE-2018-11347?
To fix CVE-2018-11347, upgrade YunoHost to version 2.7.15 or later where this vulnerability has been addressed.
What are the consequences of exploiting CVE-2018-11347?
Exploiting CVE-2018-11347 can lead to HTTP Response Header Injection, potentially allowing attackers to manipulate responses sent to users.
Who is affected by CVE-2018-11347?
CVE-2018-11347 affects all YunoHost versions from 2.7.2 to 2.7.14.
Is user interaction necessary to exploit CVE-2018-11347?
Yes, exploiting CVE-2018-11347 requires user interaction to click on a malicious link crafted by the attacker.