CVE-2024-52875 Scanner
CVE-2024-52875 Scanner - CRLF Injection vulnerability in Kerio Control
Used 2.1k times · 3.4k assets checked · url
CVE
CVE-2024-52875
8.8
CVSShigh
Exploitable remotely over the internet · no authentication required · user interaction needed.
Description
An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the /nonauth/addCertException.cs and /nonauth/guestConfirm.cs and /nonauth/expiration.cs pages is not properly sanitized before being used to generate a Location HTTP header in a 302 HTTP response. This can be exploited to perform Open Redirect or HTTP Response Splitting attacks, which in turn lead to Reflected Cross-Site Scripting (XSS). Remote command execution can be achieved by leveraging the upgrade feature in the admin interface.
Attack Vector
Network
Privileges Req.
None
User Interaction
Required
kerio control
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: kerio control
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →