CVE-2015-0276

High

Published: 21/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A cross-site request forgery (CSRF) vulnerability exists in Kallithea before version 0.2. An attacker can exploit this flaw to perform unauthorized actions on behalf of an authenticated user.

Risk Assessment

This vulnerability may lead to unauthorized access to data or execution of unwanted operations by an attacker, posing a threat to system security.

Recommendation

It is recommended to update Kallithea to the latest version to eliminate this vulnerability and implement additional safeguards against CSRF attacks.

Other vulnerabilities in Kallithea

CVE-2016-3691High
Kallithea versions before 0.3.2 allow remote attackers to bypass CSRF protection by using the GET HTTP request method.

Original NVD description (English source)

Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS