CVE-2012-5486
N/A
Published: September 30, 2014 at 02:00 PM UTC
Updated: June 16, 2026 at 11:46 PM UTC
2 products affected across 2 vendorsPloneZope
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 3%
Description
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 4.2.21.01.0.11.0.21.0.31.0.41.0.51.0.62.02.0.12.0.22.0.32.0.42.0.52.12.1.12.1.22.1.32.1.42.52.5.12.5.22.5.32.5.42.5.53.03.0.13.0.23.0.33.0.43.0.53.0.63.13.1.13.1.23.1.33.1.43.1.5.13.1.63.1.73.23.2.13.2.23.2.33.33.3.13.3.23.3.33.3.43.3.54.04.0.14.0.24.0.34.0.44.0.54.0.6.14.14.1.44.1.54.1.64.24.2 a14.2 a24.2 b14.2 b24.2 rc14.2 rc24.2.0.14.2.14.2.1.14.3
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
Vendor Advisoryx_refsource_REDHAT
Source: [email protected]
http://rhn.redhat.com/errata/RHSA-2014-1194.htmlMailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2012/11/10/1x_refsource_CONFIRMPatch
Source: [email protected]
https://plone.org/products/plone-hotfix/releases/20121106x_refsource_CONFIRMVendor Advisory
Source: [email protected]
https://plone.org/products/plone/security/advisories/20121106/02Quick Info
StatusMODIFIED
CWE
NVD-CWE-Other
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card