CVE-2018-16181 Other in i-FILTER
Remote attackers can inject HTTP headers to execute scripts or set cookies in i-FILTER web filtering software.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2018-16181?
CVE-2018-16181 is a medium-severity vulnerability in Digital Arts Inc. i-FILTER, published on 9 Jan 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
HTTP header injection vulnerability in i-FILTER Ver.9.50R05 and earlier may allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks that may result in an arbitrary script injection or setting an arbitrary cookie values via unspecified vectors.
Weakness: CWE-113
Which versions are affected by CVE-2018-16181?
It affects 1 product.
Products include Daj I-Filter.
How do I fix CVE-2018-16181?
No fix has been published for CVE-2018-16181 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-16181 being exploited?
There is no known exploitation of CVE-2018-16181 in the wild and no public exploit code.
Other vulnerabilities in Digital Arts Inc. i-FILTER
Sources
Also known as GHSA-x4fr-465j-hpj9.