high8.8
CVE-2016-3691
Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
Impact
Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Kallithea-Scm | Kallithea | through 0.3.1 |