MariaDB · Report #490997
[downloads.mariadb.org] CRLF injection in case of encoded query mark
Validstatus
mediumseverity
6upvotes
14 Feb 2019disclosed
Summary
A CRLF injection vulnerability was reported and fixed for our downloads.mariadb.org website. The attack could lead to cookie injection, HTTP response splitting and session fixation attacks, amongst other things, across mariadb domains.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.