CVE-2017-2100

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.1 and earlier allows remote attackers to conduct DNS rebinding attacks via unspecified vectors.

• CWE-20

• http://jvn.jp/en/jp/JVN87662835/index.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/96229Third Party Advisory, VDB Entry
• http://jvn.jp/en/jp/JVN87662835/index.htmlThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/96229Third Party Advisory, VDB Entry

Published

Apr 28, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2094Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated att…
• CVE-2017-2095Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated att…
• CVE-2017-2096smalruby-editor v0.4.0 and earlier allows remote attackers t…9.8
• CVE-2017-2097Cross-site request forgery (CSRF) vulnerability in Knowledge…8.8
• CVE-2017-2098Directory traversal vulnerability in CubeCart versions prior…
• CVE-2017-2099Hands-on Vulnerability Learning Tool "AppGoat" for Web Appli…
• CVE-2017-2101Hands-on Vulnerability Learning Tool "AppGoat" for Web Appli…
• CVE-2017-2102Cross-site request forgery (CSRF) vulnerability in Hands-on …
• CVE-2017-2103The LaLa Call App for Android 2.4.7 and earlier does not ver…
• CVE-2017-2104The Business LaLa Call App for Android 1.4.7 and earlier doe…
• CVE-2017-2105The TVer App for Android 3.2.7 and earlier does not verify X…
• CVE-2017-2106Multiple cross-site scripting vulnerabilities in Webmin vers…