Domoticz prior 4.10579 End of Line Argument crlf injection

entryeditHistoryDiffjsonxmlCTI

A vulnerability was found in Domoticz and classified as critical. This issue affects an unknown code of the component End of Line Handler. Upgrading to version 4.10579 eliminates this vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
8849330	05/23/2020	VulD...	url	https://www.exploit-db.com/exploits/46773/	exploit-db.com	05/23/2020	accepted	100
8849293	05/23/2020	VulD...	discoverydate	1553817600		05/23/2020	accepted	100
8849347	04/01/2019	VulD...	cvss3_nvd_basescore	7.5	nist.gov	04/01/2019	accepted	90
8849346	04/01/2019	VulD...	0day_days	2		04/01/2019	accepted	90
8849345	04/01/2019	VulD...	cvss3_vuldb_rc	X		04/01/2019	accepted	90
8849344	04/01/2019	VulD...	cvss3_vuldb_rl	O		04/01/2019	accepted	90
8849343	04/01/2019	VulD...	cvss3_vuldb_e	X		04/01/2019	accepted	90
8849342	04/01/2019	VulD...	cvss2_vuldb_rc	ND		04/01/2019	accepted	90
8849341	04/01/2019	VulD...	cvss2_vuldb_rl	OF		04/01/2019	accepted	90
8849340	04/01/2019	VulD...	cvss2_vuldb_e	ND		04/01/2019	accepted	90
8849339	04/01/2019	VulD...	location	Website		04/01/2019	accepted	90
8849338	04/01/2019	VulD...	risk	2		04/01/2019	accepted	90
8849337	04/01/2019	VulD...	seealso	132644		04/01/2019	accepted	100
8849336	04/01/2019	VulD...	cve_nvd_summary	Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.	mitre.org	04/01/2019	accepted	100
8849335	04/01/2019	VulD...	cve_assigned	1553990400	mitre.org	04/01/2019	accepted	100
8849334	04/01/2019	VulD...	cve	CVE-2019-10678	mitre.org	04/01/2019	accepted	100
8849333	04/01/2019	VulD...	upgrade_version	4.10579		04/01/2019	accepted	100
8849332	04/01/2019	VulD...	name	Upgrade		04/01/2019	accepted	100
8849331	04/01/2019	VulD...	price_0day	$0-$5k	see documentation	04/01/2019	accepted	100
8849329	04/01/2019	VulD...	date	1553990400 (03/31/2019)		04/01/2019	accepted	100