2 matches found
CVE-2017-0897
ExpressionEngine version 2.x 2.11.8 and version 3.x 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution...
ExpressionEngine <= 2.x (prior to 2.11.8) and
