Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c8x2-fgvf-cxj9

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

EPSS

Процентиль: 39%
0.00171
Низкий

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 4 лет назад

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

CVSS3: 5.4
nvd
больше 4 лет назад

Session fixation on password protected public links in the ownCloud Server before 10.8.0 allows an attacker to bypass the password protection when they can force a target client to use a controlled cookie.

CVSS3: 5.4
debian
больше 4 лет назад

Session fixation on password protected public links in the ownCloud Se ...

EPSS

Процентиль: 39%
0.00171
Низкий

Дефекты

CWE-384