Kallithea-scm

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Kallithea-scm records in CISA KEV

No Kallithea-scm vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kallithea 5 records LOW

Records

5 records

TI-2016-03124 CVE-2016-3691 · GHSA-799h-qr84-pcrp

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by…

LOW 39

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00592 Published 2017-04-24 Fixed in 0.3.2 CWE-352

TI-2015-00243 CVE-2015-0276 · GHSA-6fgp-29mf-chhc

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

LOW 39

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00721 Published 2017-09-21 Fixed in 0.2 CWE-352

TI-2015-04441 CVE-2015-5285 · GHSA-vfg9-phjp-9frw

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject…

LOW 32

CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06205 Published 2015-10-29 Fixed in 0.3 CWE-93

TI-2015-01674 CVE-2015-1864 · GHSA-fh5c-7gmg-xmp6

Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name user details…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00944 Published 2017-09-19 Fixed in 0.2.1 CWE-79

TI-2015-00228 CVE-2015-0260 · GHSA-hhx9-4vw2-x54r

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API…

LOW 23

RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01858 Published 2015-02-16 Fixed in 2.2.7, 0.2 CWE-200

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0