Back
CVE-2005-4830
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
Published: Dec 31, 2005
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| viewcvs | viewcvs | 0.9.2 |
GitHub Security Advisory GHSA-g898-v75f-fp22
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject...
References (6)
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html
- http://www.securityfocus.com/archive/1/461382/100/0/threaded
- http://www.securityfocus.com/bid/12112 Exploit
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-January/030514.html
- http://www.securityfocus.com/archive/1/461382/100/0/threaded
- http://www.securityfocus.com/bid/12112 Exploit
Risk Scores
CVSS Score
7.6 / 10
EPSS Score
2.09%
Top 20% most likely to be exploited
Threat Score
31 / 100
Data Sources
NVD
EPSS
GitHub