Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j2wq-fwmf-pw74

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

EPSS

Процентиль: 45%
0.00225
Низкий

8.8 High

CVSS3

Дефекты

CWE-384

Связанные уязвимости

CVSS3: 8.8
nvd
больше 8 лет назад

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. This makes users of the site more vulnerable to session fixation attacks.

CVSS3: 8.8
debian
больше 8 лет назад

Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to ...

EPSS

Процентиль: 45%
0.00225
Низкий

8.8 High

CVSS3

Дефекты

CWE-384