CVE-2016-3114

by Jeremyin Security Bulletinson Posted on

Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.