CVE-2012-4023

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Date published : 2012-11-08

http://jvn.jp/en/jp/JVN39563771/index.html

http://jvndb.jvn.jp/jvndb/JVNDB-2012-000099