CRLF injection vulnerability in IBM WebSphere Commerce 6.0 through 6.0.0.11 and 7.0 before 7.0.0.8 Cumulative iFix 2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.
From 神龙GPT (AIGC)
在IBM WebSphere Commerce 6.0 through 6.0.0.11 和 7.0 before 7.0.0.8 cumulative iFix 2中，CRLF注入漏洞允许远程攻击者通过构造的URL注入任意HTTP头，并实施HTTP响应分割攻击。