PatchTheCVEkitto vulnerabilities and fixes
Recent CVEs affecting kitto, with upgrade or downgrade steps. 3 tracked.
kitto has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-07-17. Highest priority: CVE-2017-1000062 (score 54/100).
- CVE-2017-1000064 HIGH 7.5 DOWNGRADE kittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS
- CVE-2017-1000063 MEDIUM 6.1 DOWNGRADE kittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in information disclosure
- CVE-2017-1000062 HIGH 7.5 DOWNGRADE kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code executi
FAQ
How do I fix kitto vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kitto being exploited right now?
None of the tracked kitto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kitto CVE should I patch first?
CVE-2017-1000062 currently ranks highest (54/100): kittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote code executi.