Kallithea Security Vulnerabilities and Issues — Kallithea CVE List

Lucene search

Kallithea-scmKallithea

3 matches found

CVE•added 2017/09/21 2:29 p.m.•47 views

CVE-2015-0276

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

8.8CVSS8.8AI score0.00255EPSS

CVE•added 2017/09/19 3:29 p.m.•41 views

CVE-2015-1864

Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name user details, or the (3) repository, (4) repository group, or (5) user group description.

5.4CVSS5.4AI score0.00372EPSS

CVE•added 2017/04/24 6:59 p.m.•40 views

CVE-2016-3691

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

8.8CVSS8.7AI score0.00112EPSS