Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Kitto Project records in CISA KEVNo Kitto Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 39
kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.03909 · Published 2017-07-13 · No fix listed CWE-22
Priority LOW 36
kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01347 · Published 2017-07-13 · No fix listed CWE-400
Priority LOW 29
kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00757 · Published 2017-07-13 · No fix listed CWE-79
