CRLF injection vulnerability in chart.cgi in Bugzilla before 3.2.10, 3.4.x before 3.4.10, 3.6.x before 3.6.4, and 4.0.x before 4.0rc2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the query string, a different vulnerability than CVE-2010-2761 and CVE-2010-4411.
                
            Metrics
Affected Vendors & Products
References
        History
                    No history.
 MITRE
                        MITRE
                    Status: PUBLISHED
Assigner: mitre
Published: 2011-01-28T15:00:00
Updated: 2024-08-07T03:51:17.760Z
Reserved: 2010-12-21T00:00:00
Link: CVE-2010-4572
 Vulnrichment
                        Vulnrichment
                    No data.
 NVD
                        NVD
                    Status : Deferred
Published: 2011-01-28T16:00:02.250
Modified: 2025-04-11T00:51:21.963
Link: CVE-2010-4572
 Redhat
                        Redhat
                    No data.