CVE-2009-4267

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter

published February 19, 2018

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01424 · 72.7th percentile
Published
2018-02-19T16:00Z
EPSS history
Timeline
  • 19 FEB 16:00Z
    The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter
    cvelistv5