CVE-2017-17734

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-12-18

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• https://forum.cmsmadesimple.org/viewtopic.php?f=1&t=77737
• https://www.cmsmadesimple.org/2017/12/Announcing-CMSMS-v2.2.5-Wawa