CRLF injection vulnerability in Kallithea prior to 0.3 allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
kallithea-scm kallithea |