TI-2015-00243 CVE-2015-0276 · GHSA-6fgp-29mf-chhc
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
Priority LOW 39
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
Vulnerabilities
5 records
TI-2015-01674 CVE-2015-1864 · GHSA-fh5c-7gmg-xmp6
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in…
Priority LOW 26
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name user details…
TI-2016-03124 CVE-2016-3691 · GHSA-799h-qr84-pcrp
Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by…
Priority LOW 39
Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
TI-2015-04441 CVE-2015-5285 · GHSA-vfg9-phjp-9frw
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject…
Priority LOW 32
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
TI-2015-00228 CVE-2015-0260 · GHSA-hhx9-4vw2-x54r
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API…
Priority LOW 23
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.