CVE-2017-2097

2017-04-2816:59:00

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

49.2%

JSON

Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CPENameOperatorVersion
knowledgeeq0.7.0pre1
knowledgeeq0.2.3
knowledgeeq1.3.0
knowledgeeq0.5.2pre4
knowledgeeq0.5.2pre2
knowledgeeq1.0.0pre2
knowledgeeq1.3.1
knowledgeeq0.5.0pre2
knowledgeeq0.4.4
knowledgeeq0.4.1

Name	Operator	Version
knowledge	eq	0.7.0pre1
knowledge	eq	0.2.3
knowledge	eq	1.3.0
knowledge	eq	0.5.2pre4
knowledge	eq	0.5.2pre2
knowledge	eq	1.0.0pre2
knowledge	eq	1.3.1
knowledge	eq	0.5.0pre2
knowledge	eq	0.4.4
knowledge	eq	0.4.1