CVE-2017-1000247 - British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws

Back Back to CVE browser

HIGH

British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws

Published Nov 17, 2017

7.5

HIGH

CVSS 3.0

EPSS 0.93%

Description

British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common function under Apache resulting in HTTP Header Injection flaws.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://github.com/advisories/GHSA-j9f9-8j39-4g97
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000247
https://www.codeigniter.com/userguide3/changelog.html#version-3-1-4
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://github.com/advisories/GHSA-j9f9-8j39-4g97		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000247
https://www.codeigniter.com/userguide3/changelog.html#version-3-1-4		x_refsource_MISCVendor Advisory