What is CVE-2014-2017?

CVE-2014-2017 is a medium-severity vulnerability in Oxidforge Eshop, classified under CRLF Injection. CVSS score: 6.1/10. Published 2018-01-18.

How severe is CVE-2014-2017?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Vulnerability in Oxidforge Eshop

CVE-2014-2017

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Vulnerability class: CRLF Injection

EPSS: 0.024 (82.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

Affected products

Oxidforge Eshop
N/a — versions n/a

Weakness classification (CWE)

CWE-93 — CRLF Injection

References

cve@mitre.org (x_refsource_CONFIRM, Issue Tracking, Vendor Advisory)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2014-2017?: CVE-2014-2017 is a medium-severity vulnerability in Oxidforge Eshop, classified under CRLF Injection. CVSS score: 6.1/10. Published 2018-01-18.
How severe is CVE-2014-2017?: Medium severity. CVSS v3 base score is 6.1 out of 10.