| Package | Affected versions | Patched versions |
|---|---|---|
| e-cology | = 9.0 |
An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free