CVE-2015-0914

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request

published May 1, 2015

CVSS
—
EPSS
2%
Percentile
76.6
In the wild
Unconfirmed
What it is

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01671 · 76.6th percentile
Published
2015-05-01T10:00Z
EPSS history
Timeline
  • 01 MAY 10:00Z
    EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request
    cvelistv5