CVE-2021-32407
Server-Side Request Forgery (SSRF) vulnerability in Kallithea (Kallithea における SSRF (サーバサイドリクエストフォージェリ))
Server-Side Request Forgery (SSRF) vulnerability in Kallithea - v0.1 up to v0.6.2 and fixed in v0.6.3, allows a remote authenticated attacker to execute a 'git clone' with a crafted URL, which allows them to send arbitrary packets into the local network accessible from the server.
Disclosure Date
2021/08/31
Credit
stypr (@stereotype32)
Affected-Versions
Kallithea: v0.6.2 and earlier
CWE
CWE-93
