CVE-2017-11717: Metinfo Project Metinfo

High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days.

MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended challenge requirements by modifying the client-server data stream, as demonstrated by the login/findpass page.

Affected products

• Metinfo Project Metinfo: up to and including 5.3.17

Published 2017-07-28. Last modified 2026-06-17.