CVE-2013-2582

CVE-2013-2582 is a CRLF injection vulnerability affecting Open-Xchange AppSuite and Server versions prior to 6.22.0 rev15, 6.22.1 rev17, 7.0.1 rev6, and 7.0.2 rev7. This flaw allows remote attackers to inject arbitrary HTTP headers and perform open redirect attacks due to improper sanitization of whitespace characters in the redirect servlet. With a CVSS score of 5.0, it is a medium severity vulnerability that can be exploited over the network with low attack complexity, potentially leading to information disclosure (P) but not confidentiality or availability impacts. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.