CVE-2019-10272

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring.

Se descubrió un problema en Weaver e-cology versión 9.0. Existe una vulnerabilidad de inyección CRLF a través de /workflow/request/ViewRequestForwardSPA.jsp, como lo demuestra el parámetro %0aSet-cookie: substring.