What’s Vulnerable › Vulnerabilities

CVE-2017-11717

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-07-28 · updated 2026-06-17
• Weakness: CWE-290

Description

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page.

Affected products

• Metinfo Project Metinfo: through 5.3.17

References

• https://lncken.cn/?p=343
• https://lncken.cn/?p=343

Get alerted when CVE-2017-11717 or the next vulnerability affects your stack