CVE-2023-23950 - User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses

MEDIUM

User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses

Published Jan 24, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.51%

User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.

Vendor n/a Product Symantec Identity Management And Governance Default
unknown
Affected
- 14.3, 14.4.1, 14.4.2

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Symantec Identity Management And Governance	unknown	Affected 14.3, 14.4.1, 14.4.2

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28015		Advisory
https://support.broadcom.com/external/content/SecurityAdvisories/0/21174		Vendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner symantec

Published Jan 24, 2023

Updated Apr 2, 2025

Reserved Jan 19, 2023

CISA Vulnrichment

Updated Apr 2, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner symantec

Published Jan 24, 2023

Updated Apr 2, 2025

GitHub

No data