MariaDB · Report #476257
CRLF injection at https://mariadb.org/.
Validstatus
mediumseverity
16upvotes
21 Feb 2019disclosed
Summary
A CRLF injection vulnerability was discovered on our website that could lead to attacks such as client side cookie injection. This has been resolved by adjusting the offending rewrite rule in our web server configuration.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.