Kotti Cross-Site Request Forgery Vulnerability

Kotti is a Pythonic Web application framework based on Pyramid and SQLAlchemy , which includes a set of scalable content management system . A cross-site request forgery vulnerability exists in the local role implementation in Kotti versions prior to 1.3.2 and 2.x versions prior to 2.0.0b2. A...