HTTP response splitting in SPIP - CVE-2019-16393
Published: September 29, 2019
Vulnerability identifier: #VU21412
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-16393
CWE-ID: CWE-113
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform HTTP splitting attacks.
The vulnerability exists due to software does not corrector process CRLF character sequences in ecrire/inc/headers.php script. A remote attacker can send specially crafted request containing CRLF sequence and make the application send a split HTTP response.
Successful exploitation of the vulnerability may allow an attacker perform cache poisoning attack.
Affected software
SPIP
spip (Debian package)
spip (Ubuntu package)
Ubuntu
spip (Debian package)
spip (Ubuntu package)
Ubuntu
How to mitigate CVE-2019-16393
Install updates from vendor's website.
SPIP - addressed in versions 3.1.11, 3.2.5
spip (Debian package) - addressed in versions 3.1.4-4~deb9u3, 3.2.4-1+deb10u1
spip (Ubuntu package) - update to 3.1.4-4~deb9u3build0.18.04.1
spip (Debian package) - addressed in versions 3.1.4-4~deb9u3, 3.2.4-1+deb10u1
spip (Ubuntu package) - update to 3.1.4-4~deb9u3build0.18.04.1