5
CVE-2015-5285
- EPSS 6.04%
- Veröffentlicht 29.10.2015 20:59:04
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginCRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kallithea-scm ≫ Kallithea Version <= 0.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 6.04% | 0.924 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://packetstormsecurity.com/files/133897/Kallithea-0.2.9-HTTP-Response-Splitting.html
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5267.php
https://kallithea-scm.org/security/cve-2015-5285.html
https://www.exploit-db.com/exploits/38424/