Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f5mr-3xx6-6379

Опубликовано: 17 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation.

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation.

EPSS

Процентиль: 59%
0.00383
Низкий

8.8 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 8.8
nvd
около 3 лет назад

An issue was discovered in BACKCLICK Professional 5.9.63. Due to an unsafe implementation of session tracking, it is possible for an attacker to trick users into opening an authenticated user session for a session identifier known to the attacker, aka Session Fixation.

EPSS

Процентиль: 59%
0.00383
Низкий

8.8 High

CVSS3

Дефекты

CWE-384