CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

Information disclosure

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

Memory corruption

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

CVE-2017-1000064: Uncontrolled Resource Consumption

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

CVE-2017-1000063: Improper Neutralization of Input During Web Page Generation

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000062: Improper Limitation of a Pathname to a Restricted Directory

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000064

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS...

CVE-2017-1000063

The CVE-2017-1000063 entry affects kitto framework (kitto version 0.5.1) and is caused by a cross-site scripting (XSS) flaw on the 404 page. The vulnerability enables remote attackers to inject malicious script/HTML, which can be used to steal sensitive information or hijack user sessions when vi...

CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure...

CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution...

CVE-2017-1000062

The CVE-2017-1000062 entry concerns kittoframework kitto 0.5.1, which is vulnerable to a directory traversal flaw in the router that can lead to remote code execution. Public references describe kitto as an Elixir-based interactive dashboard framework; the vulnerability originates from improper v...

CVE-2017-1000064

CVE-2017-1000064 affects kittoframework kitto version 0.5.1. The vulnerability is described as memory exhaustion in the router, leading to a denial of service. Connected sources consistently attribute the issue to kitto’s processing memory and do not provide a concrete patch or remediation detail...

PT-2017-10769

Name of the Vulnerable Software and Affected Versions kittoframework kitto version 0.5.1 Description The issue allows for directory traversal in the router, resulting in remote code execution. Recommendations For kittoframework kitto version 0.5.1, at the moment, there is no information about a...

PT-2017-10770

Name of the Vulnerable Software and Affected Versions kittoframework kitto version 0.5.1 Description The issue concerns an XSS vulnerability in the 404 page, which can lead to information disclosure. Recommendations For kitto version 0.5.1, update to a version that fixes the XSS vulnerability in...

PT-2017-10771

Name of the Vulnerable Software and Affected Versions kittoframework kitto version 0.5.1 Description The issue concerns memory exhaustion in the router, which can result in a denial of service DoS. Recommendations For kittoframework kitto version 0.5.1, at the moment, there is no information abou...