Kallithea cross-site request forgery (CSRF) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2015-0276 · ADVISORY
• msabramo/kallithea · PACKAGE
• pypa/advisory-database · WEB
• kallithea-scm.org/security/cve-2015-0276.html · WEB
• web.archive.org/web/20200228233024/http://www.securityfocus.com/bid/74052 · WEB
• openwall.com/lists/oss-security/2015/04/10/8 · WEB
• securityfocus.com/bid/74052 · WEB
• GitHub Advisory GHSA-6fgp-29mf-chhc · ADVISORY

kallithea 的其他漏洞

• CVE-2015-1864中危 5.4Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject a…
• CVE-2016-3691高危 8.8Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
• CVE-2015-5285中危 5.0CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response spli…
• CVE-2015-0260中危 4.0RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_re…