CVE-2017-2097: Support-Project Knowledge

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in Knowledge versions prior to v1.7.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.

Affected products

• Support-Project Knowledge: up to and including 1.4.1; version 1.5.0 only; version 1.6.0 only

Published 2017-04-28. Last modified 2026-06-17.