| Package | Affected versions | Patched versions |
|---|---|---|
| open-xchange appsuite | = 6.20.7= 6.22.0= 6.22.1= 7.0.1= 7.0.2= 7.2.0≤ 7.2.1 |
CRLF injection vulnerability in Open-Xchange AppSuite before 7.2.2, when using AJP in certain conditions, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the ajax/defer servlet.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free