CVE-2008-5657: Quassel Core

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message.

Affected products

• Quassel Quassel Core: up to and including 0.3.0.2; version 0.1.0 only; version 0.2.0 only; version 0.3.0 only; version 0.3.0.1 only

Published 2008-12-17. Last modified 2026-06-16.