NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2017-9517

CVSS 3.0: 8.8 high
EPSS: <1%p38
Published: Jun 8, 2017 · Jun 8, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-9517 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.

Vendors: atmail

Products: atmail

Weakness: CWE-352

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

2 stories

8 New HTTP/2 Implementation Flaws Expose Websites to DoS Attacks

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2019VulnerabilityCVE-2019-9511 CVE-2019-9512 CVE-2019-9513+52 · 1 read

47

Flaws in HTTP/2 implementations expose servers to DoS attacks

Security AffairsAug 14, 16:35 UTC · Aug 14, 2019VulnerabilityCVE-2019-9518 CVE-2019-9511 CVE-2019-9512+52

35