Lucene search

K
osvGoogleOSV:GHSA-VFG9-PHJP-9FRW
HistoryMay 13, 2022 - 1:26 a.m.

Kallithea CRLF injection vulnerability

2022-05-1301:26:14
Google
osv.dev
4

0.062 Low

EPSS

Percentile

93.6%

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.