VULNERABILITY INTELLIGENCE

CVE-2019-7313

CVSS score6.1 MEDIUM

EPSS probability0.87%

CISA KEVNot currently listed

Published2019-02-03

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. This affects other web sites in the same domain.

Weakness classification

CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection')

Primary references

cve@mitre.org — Exploit, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory