← Database

CVE-2009-4267

MEDIUM CVSS: 6.5 Published: 2018-02-19 Modified: 2026-06-16

Description

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.

Affected Platforms

Apache Juddi

Weakness Type

CWE-116

References