Search
Find a vulnerability
Search criteria
1 vulnerability found for KUSANAGI 8 Free Edition by GMO Prime Strategy Co., Ltd.
CVE-2026-117477 (GCVE-0-2026-117477)
Vulnerability from cvelistv5 – Published: 2026-11-09 23:22 – Updated: 2026-11-09 23:22
VLAI
EPSS
VEX
Summary
KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL.
Severity
6.1 (Medium)
CWE
- CWE-113 - Improper neutralization of CRLF sequences in HTTP headers ('HTTP Request/Response Splitting')
Assigner
jpcert
CNA
References
2 references
Impacted products
15 products
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 7 Security Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "10.7.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 7 Enterprise Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "10.7.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 8 Security Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "10.7.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 8 Enterprise Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "10.7.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 9 Security Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "10.7.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 9 Enterprise Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "10.7.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 7 Free Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 7 Business Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 7 Premium Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 8 Free Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 8 Business Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 8 Premium Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 9 Free Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 9 Business Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "KUSANAGI 9 Premium Edition",
"vendor": "GMO Prime Strategy Co., Ltd.",
"versions": [
{
"lessThanOrEqual": "9.12.2-1",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "KUSANAGI provided by GMO Prime Strategy Co., Ltd. contains an HTTP header injection vulnerability that may allow arbitrary HTTP headers to be injected into the HTTP response when a user accesses a specially crafted URL."
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N",
"version": "4.0"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en-US",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-113",
"description": "Improper neutralization of CRLF sequences in HTTP headers (\u0027HTTP Request/Response Splitting\u0027)",
"lang": "en-US",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-09T23:22:12.476Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://kusanagi.tokyo/en/releases/27995/"
},
{
"url": "https://jvn.jp/en/vu/JVNVU92635551/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2026-117477",
"datePublished": "2026-11-09T23:22:12.476Z",
"dateReserved": "2026-10-27T06:16:54.712Z",
"dateUpdated": "2026-11-09T23:22:12.476Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}