8x8 · Report #413115
CRLF injection agentcrm.8x8.com
Validstatus
mediumseverity
12upvotes
26 Jun 2020disclosed
Summary
The agent application was vulnerable to a response splitting attack when parsing line feed characters in a given URL.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.