GHSA-jjpj-fj74-73gv

GHSA-jjpj-fj74-73gv PUBLISHED

Record from GitHub Advisory Database · Published May 1, 2022

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

Timeline

May 1, 2022 CVE Published
Apr 9, 2026 Distribution Patch (4 in total, the first dated here)
Apr 30, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-jjpj-fj74-73gv
vulnetix vdb fixes GHSA-jjpj-fj74-73gv

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-jjpj-fj74-73gv/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10195 url
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00498.html url
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00285.html url
https://www.redhat.com/archives/fedora-package-announce/2007-October/msg00355.html url
http://secunia.com/advisories/27298 url
http://secunia.com/advisories/27336 url
http://secunia.com/advisories/27360 url
http://secunia.com/advisories/27387 url
http://secunia.com/advisories/27414 url
http://secunia.com/advisories/27480 url
http://www.debian.org/security/2007/dsa-1401 url
http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 url
http://www.novell.com/linux/security/advisories/2007_57_mozilla.html url
http://www.redhat.com/support/errata/RHSA-2007-0980.html url
http://www.vupen.com/english/advisories/2007/3587 url
http://www.vupen.com/english/advisories/2008/0083 url
http://secunia.com/advisories/27311 url
http://secunia.com/advisories/27383 url
http://secunia.com/advisories/27665 url
http://secunia.com/advisories/27680 url

…and 33 more

Look up in the Resolve Platform →