CVE-2016-4803

PoC ×2—

CVSS 3.0

7.5 high

EPSS

2%p82

Published

Jun 30, 2016 (Jun 30, 2016)

Modified

Jun 17, 2026

Description

CRLF injection vulnerability in the send email functionality in dotCMS before 3.3.2 allows remote attackers to inject arbitrary email headers via CRLF sequences in the subject.

Vendors: dotcms
Products: dotcms
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.