CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the content-type parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Viewcvs | Viewcvs | 0.9.2 (including) | 0.9.2 (including) |