CVE-2016-3114: Kallithea

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.

Affected products

• Kallithea Kallithea: version 0.3.1 only

Published 2017-04-24. Last modified 2026-06-17.