HTTP Response Splitting Vulnerability in FortiWeb Versions 6.3.6 - 7.0.2

HTTP Response Splitting Vulnerability in FortiWeb Versions 6.3.6 - 7.0.2

CVE-2022-42471 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

An improper neutralization of CRLF sequences in HTTP headers ('HTTP Response Splitting') vulnerability [CWE-113] In FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.4.0 through 6.4.2, FortiWeb version 6.3.6 through 6.3.20 may allow an authenticated and remote attacker to inject arbitrary headers.

Learn more about our Web App Pen Testing.