Kallithea-Scm Kallithea
5 CVEs affecting Kallithea-Scm Kallithea. Latest disclosed: 2017-09-21. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-0276 | High | 8.8 | 2017-09-21 | Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. |
CVE-2016-3691 | High | 8.8 | 2017-04-24 | Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method. |
CVE-2015-1864 | Medium | 5.4 | 2017-09-19 | Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script… |
CVE-2015-5285 | | 2015-10-29 | CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via t… | |
CVE-2015-0260 | | 2015-02-16 | RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method. |