Every CVESearch/Get API key

CVE-2004-1620

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP...

5.0 MediumPublic exploit

CVE-2004-1620 is a medium vulnerability (CVSS 5.0) in S9y Serendipity, published October 21, 2004. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 8.14%, the 94th percentile. No source names a fixed version.

What does this mean?
Severity
5.0 MediumCVSS 2.0, NVD
Exploit chance
8.14%EPSS, 94th percentile
Exploitation
None known1 public exploit
Fixed in
No fix listedNo source names one

Description

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Exploit likelihood

8.14%Down 4.4 points since Feb 4, 2022
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBS9Y Serendipity 0.x - 'exit.php' HTTP Response Splitting2004-10-21

What each source reports

NVD Score used5.0

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Record
CVE-2004-1620
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE ListNo score

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Record
CVE-2004-1620
Updated
2026-11-02
EUVDEUVD-2004-1614No score

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Record
EUVD-2004-1614
Updated
2026-11-03
GitHub AdvisoriesGHSA-3hfj-vjmw-rjj4No score

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP...

CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php.

Record
GHSA-3hfj-vjmw-rjj4
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 9 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open