HTTP Response Splitting Vulnerability in Apache Allura

CVE-2018-1319 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

In Apache Allura prior to 1.8.1, attackers may craft URLs that cause HTTP response splitting. If a victim goes to a maliciously crafted URL, unwanted results may occur including XSS or service denial for the victim's browsing session.

Learn more about our Cis Benchmark Audit For Apache Http Server.