CVE-2021-32407

Server-Side Request Forgery (SSRF) vulnerability in Kallithea

Kallithea における SSRF (サーバサイドリクエストフォージェリ)

Server-Side Request Forgery (SSRF) vulnerability in Kallithea - v0.1 up to v0.6.2 and fixed in v0.6.3, allows a remote authenticated attacker to execute a 'git clone' with a crafted URL, which allows them to send arbitrary packets into the local network accessible from the server.

Disclosure Date

2021/09/01

Credit

stypr (@stereotype32)

CWE

  • CWE-93

Product URLs

Reference

Back