Kitto Project Security Vulnerabilities

CVE-2017-1000062

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution

CVE-2017-1000063

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure

CVE-2017-1000064

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS