Описание
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| hoteldruid | fixed | 3.0.4-1 | package | |
| hoteldruid | no-dsa | bullseye | package | |
| hoteldruid | no-dsa | buster | package | |
| hoteldruid | no-dsa | stretch | package |
EPSS
Процентиль: 40%
0.00185
Низкий
Связанные уязвимости
CVSS3: 3.7
ubuntu
больше 3 лет назад
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
CVSS3: 3.7
nvd
больше 3 лет назад
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
CVSS3: 3.7
github
больше 3 лет назад
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
EPSS
Процентиль: 40%
0.00185
Низкий