Threats tagged 'ghsa-xjch-93pr-7c7c'

Tobit Laboratories AG TeamDavid's Webbox application has a vulnerability in the “cType” URL parameter that allows HTTP header injection. This flaw permits attackers to inject arbitrary headers, including additional Location headers, by exploiting improper filtering of control characters such as URL-encoded newlines. This can lead to open redirect vulnerabilities. The issue affects TeamDavid through Rollout 524.