CVE-2011-2732
SpringSource Spring Security < 2.0.7 - CRLF Injection via Logout Redirect Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-2732. PoCs published by David Mas.
AI-analyzed exploit summary This is a writeup describing a vulnerability in Spring Security that allows arbitrary HTTP header injection due to insufficient input sanitization. The example URL demonstrates how an attacker can inject headers via a crafted redirect parameter.
Description
CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the spring-security-redirect parameter.
Exploits (1)
This is a writeup describing a vulnerability in Spring Security that allows arbitrary HTTP header injection due to insufficient input sanitization. The example URL demonstrates how an attacker can inject headers via a crafted redirect parameter.