CVE-2017-5615

MEDIUM

cPanel cgiemail and cgiecho - HTTP Header Injection via Newline in Redirect Location

Title source: llm

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

Vendor Advisory x_refsource_misc

Mailing List, Third Party Advisory mailing-list x_refsource_mlist

CVSS v3 6.1

EPSS 0.0028

EPSS Percentile 51.4%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-601

Status published

Products (2)

cpanel/cgiecho

cpanel/cgiemail

Published Mar 03, 2017

Tracked Since Feb 18, 2026