CVE-2026-54214
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-601
Redireccionamiento de URL a sitio no confiable (Open Redirect)
Fecha de publicación:
07/08/2026
Última modificación:
07/08/2026
Descripción
*** Pendiente de traducción *** Tobit Laboratories AG TeamDavid&#39;s Webbox application is vulnerable to HTTP header injection through the <br />
“cType” URL parameter, which allows arbitrary modification of the <br />
Content-Type header in HTTP responses. Because the parameter does not <br />
properly restrict control characters such as URL-encoded newlines <br />
(“%0a”) or colons, attackers can inject additional headers including <br />
extra Location headers into the server’s response. This results e.g. in <br />
an open redirect vulnerability. This issue affects TeamDavid through Rollout 524.
Impacto
Puntuación base 4.0
5.30
Gravedad 4.0
MEDIA