Kotti Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Kotti Project records in CISA KEV

No Kotti Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kotti 1 record LOW

Records

1 record in Kotti · all components

TI-2018-07019 CVE-2018-9856 · GHSA-3hq4-f2v6-q338

Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as…

LOW 39

Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00633 Published 2018-04-09 Fixed in 1.3.2, 2.0.0b2 CWE-352

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0