CVE-2024-52875 | GFI Kerio Control up to 9.2.5 GET Parameter response splitting (KIS-2024-07)

A vulnerability was found in GFI Kerio Control up to 9.2.5. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component GET Parameter Handler. The manipulation leads to http response splitting.

This vulnerability is known as CVE-2024-52875. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.