Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2017-11667
HistoryOct 03, 2022 - 4:23 p.m.

CVE-2017-11667

2022-10-0316:23:03
mitre
www.cve.org
1
openproject
session expiry
vulnerability
apiv3
hijacked session

8.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

JSON

OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session.

Related

nvd 2
prion 1
cve 2
osv 1
nvd
nvd
CVE-2017-11667
2017-07-26 20:29:00
CVE-2017-1000233
2017-11-17 18:29:00
prion
prion
Session fixation
2017-07-26 20:29:00
cve
cve
CVE-2017-11667
2022-10-03 16:23:03
CVE-2017-1000233
2022-10-03 16:23:10
osv
osv
CVE-2017-11667
2017-07-26 20:29:00

8.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.8%

JSON
Related for CVELIST:CVE-2017-11667
nvd2prion1cve2osv1