CVE-2016-1900

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2016-1900
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-1900.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-1900
Downstream
Related
Published
2016-01-20T16:59:04.910Z
Modified
2025-12-05T09:50:45.480925Z
Severity
  • 3.7 (Low) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
[none]
Details

CRLF injection vulnerability in the cgitprinthttp_headers function in ui-shared.c in CGit before 0.12 allows remote attackers with permission to write to a repository to inject arbitrary HTTP headers and conduct HTTP response splitting attacks or cross-site scripting (XSS) attacks via newline characters in a filename.

References

Affected packages

Git / git.zx2c4.com/cgit

Affected ranges

Type
GIT
Repo
http://git.zx2c4.com/cgit
Events
Introduced
0 Unknown introduced commit / All previous commits are affected

Git / git.zx2c4.com/cgit

Affected ranges

Type
GIT
Repo
https://git.zx2c4.com/cgit
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
513b3863d999f91b47d7e9f26710390db55f9463

Affected versions

v0.*

v0.1
v0.10
v0.10.1
v0.10.2
v0.11.0
v0.11.1
v0.11.2
v0.2
v0.3
v0.4
v0.5
v0.6
v0.6.1
v0.6.2
v0.6.3
v0.7
v0.7.1
v0.7.2
v0.8
v0.8.1
v0.8.1.1
v0.8.2
v0.8.2.1
v0.8.2.2
v0.8.3
v0.8.3.1
v0.8.3.2
v0.8.3.3
v0.8.3.4
v0.8.3.5
v0.9
v0.9.0.1
v0.9.0.2
v0.9.0.3
v0.9.1
v0.9.2

Database specific

vanir_signatures

[
    {
        "signature_type": "Line",
        "source": "https://git.zx2c4.com/cgit@513b3863d999f91b47d7e9f26710390db55f9463",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2016-1900-2a16d71d",
        "digest": {
            "line_hashes": [
                "303635134559780235920602479049562748628",
                "268029137398368228895866990574732411445",
                "238148945285719645881734013997579473124",
                "161613218865791216369151868169239121144"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "html.h"
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.zx2c4.com/cgit@513b3863d999f91b47d7e9f26710390db55f9463",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2016-1900-6d73d14e",
        "digest": {
            "function_hash": "332491374332546430843719618893626928978",
            "length": 1089.0
        },
        "target": {
            "file": "ui-shared.c",
            "function": "cgit_print_http_headers"
        }
    },
    {
        "signature_type": "Line",
        "source": "https://git.zx2c4.com/cgit@513b3863d999f91b47d7e9f26710390db55f9463",
        "signature_version": "v1",
        "deprecated": false,
        "id": "CVE-2016-1900-f391dad3",
        "digest": {
            "line_hashes": [
                "280853181015064525992207757317778338098",
                "2445699724713834896364786767072858261",
                "333801533415353928040247592516687827248",
                "246362227111271641823560225534250708303",
                "36085700276502553116015216949278302173",
                "125375886728632254251014709506464421448"
            ],
            "threshold": 0.9
        },
        "target": {
            "file": "ui-shared.c"
        }
    }
]