Kallithea Routes CSRF Bypass

2022-05-1301:26:14

Google

osv.dev

0.001 Low

EPSS

Percentile

40.6%

JSON

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

CPENameOperatorVersion
kallitheaeq0.2.2
kallitheaeq0.1
kallitheaeq0.3
kallitheaeq0.2.9
kallitheaeq0.2
kallitheaeq0.2.99-pre
kallitheaeq0.3.1
kallitheaeq0.2.1
kallitheaeq0.0

Name	Operator	Version
kallithea	eq	0.2.2
kallithea	eq	0.1
kallithea	eq	0.3
kallithea	eq	0.2.9
kallithea	eq	0.2
kallithea	eq	0.2.99-pre
kallithea	eq	0.3.1
kallithea	eq	0.2.1
kallithea	eq	0.0

References

www.openwall.com/lists/oss-security/2016/05/02/3

github.com/NexMirror/Kallithea

nvd.nist.gov/vuln/detail/CVE-2016-3691

0.001 Low

EPSS

Percentile

40.6%

JSON

Related for OSV:GHSA-799H-QR84-PCRP