kotti project vulnerabilities

Products

• kotti 1

Latest kotti project CVEs

Newest publication first

1. CVE-2018-9856 Kotti CSRF in the local roles implementation

   Published 2018-04-09

   High·CVSS 8.8 EPSS 0.63%

   Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.