Vulnerability Details CVE-2023-38330
OXID eShop Enterprise Edition 6.5.0 – 6.5.2 before 6.5.3 allows uploading files with modified headers in the administration area. An attacker can upload a file with a modified header to create a HTTP Response Splitting attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.1%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2023-38330
-
cpe:2.3:a:oxid-esales:eshop:6.5.0
-
cpe:2.3:a:oxid-esales:eshop:6.5.2