CVE-2016-3691

High

Published: 24/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Kallithea versions before 0.3.2 allow remote attackers to bypass CSRF protection by using the GET HTTP request method.

Bypassing CSRF protection may lead to unauthorized access to application resources, posing a serious threat to user data security.

It is recommended to upgrade Kallithea to version 0.3.2 or later to mitigate this vulnerability.

Original NVD description (English source)

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS