Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-11667
6.8
MEDIUMCVSS v2
Published
July 26, 2017
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
OpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote attackers to perform APIv3 requests indefinitely by leveraging a hijacked session.
opf/openproject
GitHubOpenProject is the leading open source project management software for product, project and portfolio management. A powerful Jira alternative with agile planning, issue tracking, roadmaps, Gantt charts, time tracking, collaboration features, and more. Available on premises or in the cloud. ⭐Star us on GitHub
GitHubOpenProject is the leading open source project management software for product, project and portfolio management. A powerful Jira alternative with agile planning, issue tracking, roadmaps, Gantt charts, time tracking, collaboration features, and more. Available on premises or in the cloud. ⭐Star us on GitHub= 7.0.1, = 7.0.2, <= 6.1.5, = 7.0.0NVD