Description

nginx 0.8.41 through 1.4.3 and 1.5.x before 1.5.7 allows remote attackers to bypass intended restrictions via an unescaped space character in a URI.

Remediation

References

CVE-2013-4547

Related Vulnerabilities

Oracle JRE CVE-2013-0432 Vulnerability (CVE-2013-0432)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.6.7)

Drupal Core 4.7.x Arbitrary Code Execution (4.7.0)

WordPress 3.0.3 KSES Library Cross-Site Scripting Vulnerability (0.6.2 - 3.0.3)

WordPress Plugin MaxBlogPress Max Banner Ads Cross-Site Scripting (1.9)

Severity

High

Classification

CVE-2013-4547 CWE-116

Tags

Missing Update Known Vulnerabilities