CVEvulnerability
CVE-2015-5285
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-10-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Description
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
Affected configurations
• kallithea-scm kallithea (<= 0.2)
References
- http://packetstormsecurity.com/files/133897/Kallithea-0.2.9-HTTP-Response-Splitting.html Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5267.php Exploit
- https://kallithea-scm.org/security/cve-2015-5285.html Exploit, Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/38424/ Exploit
- http://packetstormsecurity.com/files/133897/Kallithea-0.2.9-HTTP-Response-Splitting.html Exploit
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5267.php Exploit
- https://kallithea-scm.org/security/cve-2015-5285.html Exploit, Patch, Vendor Advisory
- https://www.exploit-db.com/exploits/38424/ Exploit