Количество 2
Количество 2
CVE-2024-23679
больше 2 лет назад
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
CVSS3: 9.8
EPSS: Низкий
GHSA-4m5p-5w5w-3jcf
почти 4 года назад
com.enonic.xp:lib-auth vulnerable to Session Fixation
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-23679 Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes. | CVSS3: 9.8 | 1% Низкий | больше 2 лет назад |
| GHSA-4m5p-5w5w-3jcf com.enonic.xp:lib-auth vulnerable to Session Fixation | CVSS3: 9.8 | 1% Низкий | почти 4 года назад |
Уязвимостей на страницу
20