What is GHSA-2q8v-qx2x-hxjx?

GHSA-2q8v-qx2x-hxjx is a security advisory published by GitHub Security Advisories with Medium severity. Jenkins allows HTTP Injection and Response Splitting

Which CVE IDs does GHSA-2q8v-qx2x-hxjx cover?

GHSA-2q8v-qx2x-hxjx covers the following CVE IDs: CVE-2012-6072. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-2q8v-qx2x-hxjx?

GHSA-2q8v-qx2x-hxjx affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.481, \u003c 1.491; maven/org.jenkins-ci.main:jenkins-core:\u003c 1.480.1.

GHSA-2q8v-qx2x-hxjxMedium

Jenkins allows HTTP Injection and Response Splitting

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2012-6072 →

📋 Description

CRLF injection vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:>= 1.481, < 1.491
maven/org.jenkins-ci.main:jenkins-core:< 1.480.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2012-6072
https://bugzilla.redhat.com/show_bug.cgi?id=890607
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20
http://rhn.redhat.com/errata/RHSA-2013-0220.html
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-11-20.cb
https://github.com/advisories/GHSA-2q8v-qx2x-hxjx