{"id":"CVE-2017-0897","details":"ExpressionEngine version 2.x \u003c 2.11.8 and version 3.x \u003c 3.5.5 create an object signing token with weak entropy. Successfully guessing the token can lead to remote code execution.","modified":"2026-07-08T05:48:37.951073565Z","published":"2017-06-22T21:29:00.183Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:expressionengine:expressionengine:2.0.0:public_beta:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.0.1:public_beta:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.0.2:public_beta:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.1.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.1.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.1.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.1.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.1.5:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.10.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.10.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.10.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.5:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.6:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.11.7:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.2.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.2.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.2.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.3.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.3.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.4.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.5.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.5.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.5.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.5.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.5.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.5.5:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.6.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.6.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.7.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.7.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.7.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.7.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.8.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.8.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.9.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.9.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.9.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:2.9.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.5:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.0.6:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.1.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.1.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.1.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.1.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.1.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.2.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.3.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.3.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.3.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.3.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.3.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.5:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.6:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.4.7:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.5.0:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.5.2:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.5.3:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.5.4:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"2.0.0-public_beta"},{"last_affected":"2.0.0-public_beta"},{"introduced":"2.0.1-public_beta"},{"last_affected":"2.0.1-public_beta"},{"introduced":"2.0.2-public_beta"},{"last_affected":"2.0.2-public_beta"},{"introduced":"2.1.0"},{"last_affected":"2.1.0"},{"introduced":"2.1.1"},{"last_affected":"2.1.1"},{"introduced":"2.1.2"},{"last_affected":"2.1.2"},{"introduced":"2.1.3"},{"last_affected":"2.1.3"},{"introduced":"2.1.4"},{"last_affected":"2.1.4"},{"introduced":"2.1.5"},{"last_affected":"2.1.5"},{"introduced":"2.2.0"},{"last_affected":"2.2.0"},{"introduced":"2.2.1"},{"last_affected":"2.2.1"},{"introduced":"2.2.2"},{"last_affected":"2.2.2"},{"introduced":"2.3.0"},{"last_affected":"2.3.0"},{"introduced":"2.3.1"},{"last_affected":"2.3.1"},{"introduced":"2.4.0"},{"last_affected":"2.4.0"},{"introduced":"2.5.0"},{"last_affected":"2.5.0"},{"introduced":"2.5.1"},{"last_affected":"2.5.1"},{"introduced":"2.5.2"},{"last_affected":"2.5.2"},{"introduced":"2.5.3"},{"last_affected":"2.5.3"},{"introduced":"2.5.4"},{"last_affected":"2.5.4"},{"introduced":"2.5.5"},{"last_affected":"2.5.5"},{"introduced":"2.6.0"},{"last_affected":"2.6.0"},{"introduced":"2.6.1"},{"last_affected":"2.6.1"},{"introduced":"2.7.0"},{"last_affected":"2.7.0"},{"introduced":"2.7.1"},{"last_affected":"2.7.1"},{"introduced":"2.7.2"},{"last_affected":"2.7.2"},{"introduced":"2.7.3"},{"last_affected":"2.7.3"},{"introduced":"2.8.0"},{"last_affected":"2.8.0"},{"introduced":"2.8.1"},{"last_affected":"2.8.1"},{"introduced":"2.9.0"},{"last_affected":"2.9.0"},{"introduced":"2.9.1"},{"last_affected":"2.9.1"},{"introduced":"2.9.2"},{"last_affected":"2.9.2"},{"introduced":"2.9.3"},{"last_affected":"2.9.3"},{"introduced":"2.10.0"},{"last_affected":"2.10.0"},{"introduced":"2.10.2"},{"last_affected":"2.10.2"},{"introduced":"2.10.3"},{"last_affected":"2.10.3"},{"introduced":"2.11.0"},{"last_affected":"2.11.0"},{"introduced":"2.11.1"},{"last_affected":"2.11.1"},{"introduced":"2.11.2"},{"last_affected":"2.11.2"},{"introduced":"2.11.3"},{"last_affected":"2.11.3"},{"introduced":"2.11.4"},{"last_affected":"2.11.4"},{"introduced":"2.11.5"},{"last_affected":"2.11.5"},{"introduced":"2.11.6"},{"last_affected":"2.11.6"},{"introduced":"2.11.7"},{"last_affected":"2.11.7"},{"introduced":"3.0.0"},{"last_affected":"3.0.0"},{"introduced":"3.0.1"},{"last_affected":"3.0.1"},{"introduced":"3.0.2"},{"last_affected":"3.0.2"},{"introduced":"3.0.3"},{"last_affected":"3.0.3"},{"introduced":"3.0.4"},{"last_affected":"3.0.4"},{"introduced":"3.0.5"},{"last_affected":"3.0.5"},{"introduced":"3.0.6"},{"last_affected":"3.0.6"},{"introduced":"3.1.0"},{"last_affected":"3.1.0"},{"introduced":"3.1.1"},{"last_affected":"3.1.1"},{"introduced":"3.1.2"},{"last_affected":"3.1.2"},{"introduced":"3.1.3"},{"last_affected":"3.1.3"},{"introduced":"3.1.4"},{"last_affected":"3.1.4"},{"introduced":"3.2.0"},{"last_affected":"3.2.0"},{"introduced":"3.2.1"},{"last_affected":"3.2.1"},{"introduced":"3.3.0"},{"last_affected":"3.3.0"},{"introduced":"3.3.1"},{"last_affected":"3.3.1"},{"introduced":"3.3.2"},{"last_affected":"3.3.2"},{"introduced":"3.3.3"},{"last_affected":"3.3.3"},{"introduced":"3.3.4"},{"last_affected":"3.3.4"},{"introduced":"3.4.0"},{"last_affected":"3.4.0"},{"introduced":"3.4.1"},{"last_affected":"3.4.1"},{"introduced":"3.4.2"},{"last_affected":"3.4.2"},{"introduced":"3.4.3"},{"last_affected":"3.4.3"},{"introduced":"3.4.4"},{"last_affected":"3.4.4"},{"introduced":"3.4.5"},{"last_affected":"3.4.5"},{"introduced":"3.4.6"},{"last_affected":"3.4.6"},{"introduced":"3.4.7"},{"last_affected":"3.4.7"},{"introduced":"3.5.0"},{"last_affected":"3.5.0"},{"introduced":"3.5.2"},{"last_affected":"3.5.2"},{"introduced":"3.5.3"},{"last_affected":"3.5.3"},{"introduced":"3.5.4"},{"last_affected":"3.5.4"}],"source":"CPE_STRING","vendor_product":"expressionengine:expressionengine"}]},"references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/99242"},{"type":"ADVISORY","url":"https://docs.expressionengine.com/latest/about/changelog.html#version-3-5-5"},{"type":"ADVISORY","url":"https://docs.expressionengine.com/v2/about/changelog.html#version-2-11-8"},{"type":"ADVISORY","url":"https://expressionengine.com/blog/expressionengine-3.5.5-and-2.11.8-released"},{"type":"REPORT","url":"https://hackerone.com/reports/215890"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/expressionengine/expressionengine","events":[{"introduced":"0017bb5add82250eb8f3fa8252c38590e0989d38"},{"last_affected":"5f9a3afc6edc901323cf4240d3040ec42628de65"}],"database_specific":{"extracted_events":[{"introduced":"2.10.1"},{"last_affected":"2.10.1"},{"introduced":"3.5.1"},{"last_affected":"3.5.1"}],"source":"CPE_STRING","cpe":["cpe:2.3:a:expressionengine:expressionengine:2.10.1:*:*:*:*:*:*:*","cpe:2.3:a:expressionengine:expressionengine:3.5.1:*:*:*:*:*:*:*"]}}],"versions":["2.10.1","3.5.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-0897.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}