CVE-2017-2097
28.04.2017, 16:59
Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
| Vendor | Product | Version |
|---|---|---|
| support-project | knowledge | 𝑥 ≤ 1.4.1 |
| support-project | knowledge | 1.5.0 |
| support-project | knowledge | 1.5.0:pre1 |
| support-project | knowledge | 1.6.0 |
| support-project | knowledge | 1.6.0:pre1 |
| support-project | knowledge | 1.6.0:pre2 |
| support-project | knowledge | 1.6.0:pre3 |
| support-project | knowledge | 1.6.0:pre4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration