PT-2017-6444

CVE-2015-0276

Published

2017-09-21

Updated

2022-05-13

CVSS 4.0

8.7

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Kallithea versions prior to 0.2

Description A cross-site request forgery (CSRF) issue exists. This allows an attacker to perform unintended actions on a user's account.

Recommendations For versions prior to 0.2, update to version 0.2 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

GHSA-6FGP-29MF-CHHC

PYSEC-2017-16

Found an issue in the description? Have something to add? Feel free to write us 👾