CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

Memory corruption

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

Information disclosure

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000064

CVE-2017-1000064 affects kittoframework kitto version 0.5.1. The vulnerability is described as memory exhaustion in the router, leading to a denial of service. Connected sources consistently attribute the issue to kitto’s processing memory and do not provide a concrete patch or remediation detail...

CVE-2017-1000062

The CVE-2017-1000062 entry concerns kittoframework kitto 0.5.1, which is vulnerable to a directory traversal flaw in the router that can lead to remote code execution. Public references describe kitto as an Elixir-based interactive dashboard framework; the vulnerability originates from improper v...

CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000064

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

CVE-2017-1000063

The CVE-2017-1000063 entry affects kitto framework (kitto version 0.5.1) and is caused by a cross-site scripting (XSS) flaw on the 404 page. The vulnerability enables remote attackers to inject malicious script/HTML, which can be used to steal sensitive information or hijack user sessions when vi...