CVE-2019-7313

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter

published February 3, 2019

CVSS
—
EPSS
1%
Percentile
58.4
In the wild
Unconfirmed
What it is

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00870 · 58.4th percentile
Published
2019-02-03T08:00Z
EPSS history
Timeline
  • 03 FEB 08:00Z
    www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter
    cvelistv5