Skip to main content

Kitto Project

3 CVEs vendor

Monthly

CVE-2017-1000064 Jul 17, 13:18 HIGH This Week

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Kitto Kitto Project
NVD
CVSS 3.0
7.5
EPSS
0.4%
CVE-2017-1000063 Jul 17, 13:18 MEDIUM This Month

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Information Disclosure Kitto Kitto Project
NVD
CVSS 3.0
6.1
EPSS
0.2%
CVE-2017-1000062 Jul 17, 13:18 HIGH This Week

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Kitto Kitto Project
NVD
CVSS 3.0
7.5
EPSS
3.0%
EPSS 0% CVSS 7.5
HIGH This Week

kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Kitto Kitto Project
NVD
EPSS 0% CVSS 6.1
MEDIUM This Month

kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Information Disclosure Kitto +1
NVD
EPSS 3% CVSS 7.5
HIGH This Week

kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code execution. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Path Traversal Kitto +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy