RhodeCode and Kallithea are vulnerable to sensitive information disclosure

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2015-0260 · ADVISORY
• exchange.xforce.ibmcloud.com/vulnerabilities/100888 · WEB
• pypa/advisory-database · WEB
• pypa/advisory-database · WEB
• kallithea-scm.org/repos/kallithea/changeset/5923d74742879b812965568475e21c3496d722a9 · WEB
• kallithea-scm.org/security/cve-2015-0260.html · WEB
• rhodecode.com/blog/rhodecode-enterprise-security-release · WEB
• web.archive.org/web/20150321135511/http://www.securityfocus.com/bid/72573 · WEB
• seclists.org/oss-sec/2015/q1/505 · WEB
• securityfocus.com/bid/72573
• rhodecode.com/blog/rhodecode-enterprise-security-release

Lỗ hổng khác của kallithea

• CVE-2015-0276CAO 8.8Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
• CVE-2015-1864TRUNG BÌNH 5.4Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject a…
• CVE-2016-3691CAO 8.8Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
• CVE-2015-5285TRUNG BÌNH 5.0CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spli…