CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Kallithea | Kallithea-scm | * | 0.2 (including) |