Kallithea@* Security Vulnerabilities and Issues — Kallithea@* CVE List

Lucene search

Kallithea-scmKallithea*

3 matches found

CVE•added 2015/10/29 8:59 p.m.•57 views

CVE-2015-5285

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

5CVSS6.8AI score0.05309EPSS

CVE•added 2017/09/21 2:29 p.m.•47 views

CVE-2015-0276

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

8.8CVSS8.8AI score0.00255EPSS

CVE•added 2017/04/24 6:59 p.m.•40 views

CVE-2016-3691

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

8.8CVSS8.7AI score0.00112EPSS