Security Advisory

CVE-2017-0897

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-06-22 21:00:00

Last updated 2024-08-05 13:25:16

Assigner hackerone

CVSS score not scored

State PUBLISHED

Description

ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution.

← Browse all CVEs View on cve.org ↗