CVE-2016-3114: Undefined Security Weakness

Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access...