Back

CVE-2005-4830

CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.

Published: Dec 31, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
viewcvs viewcvs 0.9.2

GitHub Security Advisory GHSA-g898-v75f-fp22

CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject...

Risk Scores

CVSS Score 7.6 / 10
EPSS Score 2.09%

Top 20% most likely to be exploited

Threat Score 31 / 100

Data Sources

NVD EPSS GitHub