Medium severity6.1NVD Advisory· Published Jan 18, 2018· Updated Jun 17, 2026

CVE-2014-2017

Description

CRLF injection vulnerability in OXID eShop Professional Edition before 4.7.11 and 4.8.x before 4.8.4, Enterprise Edition before 5.0.11 and 5.1.x before 5.1.4, and Community Edition before 4.7.11 and 4.8.x before 4.8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oxid/Eshopinferred
Range: <4.7.11 || >=4.8.0 <4.8.4
Oxid/OXID eShop Enterprise Editionllm-fuzzy
Range: <5.0.11
Oxid/OXID eShop Professional Editionllm-fuzzy
Range: <4.7.11
Oxid/eShop Community Editionllm-fuzzy
Range: <4.7.11

Patches

Vulnerability mechanics

References

oxidforge.org/en/security-bulletin-2014-002.htmlnvdPatchVendor Advisory
bugs.oxid-esales.com/view.phpnvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000