CVE-2016-2303

MEDIUM

Ecava IntegraXor <5.0.4522 - HTTP Response Splitting

Title source: llm

Description

CRLF injection vulnerability in Ecava IntegraXor before 5.0 build 4522 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL.

Scores

CVSS v3 5.3
EPSS 0.0043
EPSS Percentile 61.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Classification

Status draft

Affected Products (1)

ecava/integraxor < 4.2.4502

Timeline

Published Apr 22, 2016
Tracked Since Feb 18, 2026