CVE-2019-16393

Summary: 
SPIP before 3.1.11 and 3.2 before 3.2.5 mishandles redirect URLs in ecrire/inc/headers.php with a %0D, %0A, or %20 character.
Published: 
Tuesday, September 17, 2019 - 17:15
cvss: