CVE-2024-25175

Kickdler Server versions prior to v1.107.0 are vulnerable to a Reflected Cross-Site Scripting (XSS) flaw caused by a HTTP response splitting attack. The root cause is the server's failure to correctly process line breaks (e.g., or %0d%0a). An attacker can exploit this by providing a specially cra...