What’s Vulnerable › Vulnerabilities

CVE-2012-4023

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-11-08 · updated 2026-06-16
• Weakness: CWE-20

Description

CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

Affected products

• Simon Brown Pebble: through 2.6.3; 1.0, 1.1, 1.2, 1.3, 1.4, 1.4-beta1 (+41)

References

• http://jvn.jp/en/jp/JVN39563771/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000099
• http://secunia.com/advisories/51102
• http://jvn.jp/en/jp/JVN39563771/index.html
• http://jvndb.jvn.jp/jvndb/JVNDB-2012-000099
• http://secunia.com/advisories/51102

Get alerted when CVE-2012-4023 or the next vulnerability affects your stack