Disclosure Date 2021/08/31

CVE-2021-32407

Server-Side Request Forgery (SSRF) vulnerability in Kallithea

Kallithea における SSRF (サーバサイドリクエストフォージェリ)

Description

Server-Side Request Forgery (SSRF) vulnerability in Kallithea - v0.1 up to v0.6.2 and fixed in v0.6.3, allows a remote authenticated attacker to execute a 'git clone' with a crafted URL, which allows them to send arbitrary packets into the local network accessible from the server.