Security Advisory

CVE-2017-11667

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-26 20:00:00

Last updated 2024-09-16 18:18:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session.

← Browse all CVEs View on cve.org ↗