Description
Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | kallithea | < 0.3.2 | 0.3.2 | GHSA-799h-qr84-pcrp |
High · 8.8
CVE-2016-3691
EUVD-2022-2960GHSA-799h-qr84-pcrpPYSEC-2026-648
Kallithea Routes CSRF Bypass
Published Apr 24, 2017 · Updated Aug 6, 2024 · Assigned by redhat