VYPR
High severity8.8NVD Advisory· Published Apr 24, 2017· Updated May 13, 2026

CVE-2016-3691

CVE-2016-3691

Description

Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
kallitheaPyPI
< 0.3.20.3.2

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.