Unscored CVE-2017-2097 EUVD-2017-11280GHSA-j597-mqj3-79c6

Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication …

Published Apr 28, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: support-project.org Product: Knowledge

Description

Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
support-project.org	Knowledge	versions prior to v1.7.0	—

References

JVN#09460804 third-party-advisory
95779 vdb-entry