Every CVE Search/ Get API key

CVE-2013-1869

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)...

4.3 Medium

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

Exploit likelihood

1.85%Up 0.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

Record
CVE-2013-1869
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

Record
CVE-2013-1869
Updated
2026-11-02
EUVDEUVD-2013-1871 No score

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

Record
EUVD-2013-1871
Updated
2026-11-03
GitHub AdvisoriesGHSA-9c7m-xg64-cvv7 No score

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN)...

CRLF injection vulnerability in spacewalk-java before 2.1.148-1 and Red Hat Network (RHN) Satellite 5.6 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via the return_url parameter.

Record
GHSA-9c7m-xg64-cvv7
Weakness
CWE-20
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
satellite-branding
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:5.6.0.23-1.el5sat
0:5.6.0.23-1.el5sat
spacewalk-base
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-grail
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-html
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
Show 28 moreShow less
Affected packages
PackageAffectedFixed
spacewalk-java
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el5sat
0:2.0.2-58.el5sat
spacewalk-web
Red Hat:network_satellite:5.6::el5
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el5sat
0:2.0.3-19.el5sat
spacewalk-base-minimal
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-web
Red Hat:network_satellite_managed_db:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
satellite-branding
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:5.6.0.23-1.el6sat
0:5.6.0.23-1.el6sat
spacewalk-base
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-base-minimal-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-dobby
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-grail
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-html
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-java
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-config
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-lib
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-oracle
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-java-postgresql
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-pxt
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-sniglets
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat
spacewalk-taskomatic
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.2-58.el6sat
0:2.0.2-58.el6sat
spacewalk-web
Red Hat:network_satellite:5.6::el6
From an advisory covering 4 CVEs
 before 0:2.0.3-19.el6sat
0:2.0.3-19.el6sat

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-1869 is a medium vulnerability (CVSS 4.3) in Redhat Satellite, published April 1, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.85%, the 79th percentile. No source names a fixed version.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open