MariaDB · Report #481512
CRLF injection on https://buildbot.mariadb.org
Validstatus
mediumseverity
7upvotes
4 Feb 2019disclosed
Summary
A CRLF (new line) injection vulnerability has been discovered in the Buildbot.net software and reported to us. We have forwarded this to the Buildbot developers which coordinated a fix release and public disclosure. This vulnerability has been assigned CVE-2019-7313. More details in the advisory text.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.