Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kallithea Routes 安全漏洞
Vulnerability Description
Kallithea是美国Software Freedom Conservancy组织下的一个项目，是一套免费的源码管理系统。该系统支持Mercurial和Git版本控制系统、托管代码、管理访问控制等。Routes是其中的一个采用Python实现的Rails的URL映射控制模块。 Kallithea 0.3.2之前的版本中的Routes存在安全漏洞。远程攻击者可通过使用GET HTTP请求方法利用该漏洞绕过跨站请求伪造保护。
CVSS Information
N/A
Vulnerability Type
N/A