CVE-2022-42471

An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.4.0 through 6.4.2, FortiWeb version 6.3.6 through 6.3.20 may allow an authenticated and remote attacker to inject arbitrary headers.

An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.4.0 through 6.4.2, FortiWeb version 6.3.6 through 6.3.20 may allow an authenticated and remote attacker to inject arbitrary headers.

Una vulnerabilidad de neutralización incorrecta de secuencias CRLF en encabezados HTTP ('División de respuesta HTTP') [CWE-113] en FortiWeb versión 7.0.0 a 7.0.2, FortiWeb versión 6.4.0 a 6.4.2, FortiWeb versión 6.3.6 a 6.3 .20 puede permitir que un atacante remoto y autenticado inyecte encabezados arbitrarios.