Описание
Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:kallithea:kallithea:0.3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00852
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
CVSS3: 6.5
debian
больше 9 лет назад
Kallithea before 0.3.2 allows remote authenticated users to edit or de ...
CVSS3: 6.5
github
больше 4 лет назад
Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.
EPSS
Процентиль: 56%
0.00852
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-264