VULNERABILITY INTELLIGENCE

CVE-2015-5285

CVSS score5 MEDIUM
EPSS probability6.09%
CISA KEVNot currently listed
Published2015-10-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

Primary references