Lucene search
PRIOn knowledge basePRION:CVE-2017-11667HistoryJul 26, 2017 - 8:29 p.m.
Session fixation
2017-07-2620:29:00
PRIOn knowledge base
www.prio-n.com
6
OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openproject | eq | 7.0.1 | |
| openproject | eq | 7.0.2 | |
| openproject | le | 6.1.5 | |
| openproject | eq | 7.0.0 |
Related
nvd
nvd
CVE-2017-11667
2017-07-26 20:29:00
CVE-2017-1000233
2017-11-17 18:29:00
cvelist
cvelist
CVE-2017-11667
2022-10-03 16:23:03
osv
osv
CVE-2017-11667
2017-07-26 20:29:00
cve
cve
CVE-2017-11667
2022-10-03 16:23:03
CVE-2017-1000233
2022-10-03 16:23:10