CVE-2002-1159: Canna

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Canna 3.6 and earlier does not properly validate requests, which allows remote attackers to cause a denial of service or information leak.

Affected products

• Canna Canna: version 3.5b2 only; version 3.6 only

Published 2002-12-18. Last modified 2026-06-16.