CVE-2009-4267: apache software foundation juddi Improper Encoding or Escaping of Output

Vulnerability summary

CVE-2009-4267 is a medium (CVSS 6.5) Improper Encoding or Escaping of Output vulnerability in apache software foundation juddi. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.4% of scored vulnerabilities.

Timeline

1. 19-02-2018
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.

• CWE-116Improper Encoding or Escaping of OutputThe product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.