Количество 3
Количество 3
CVE-2026-103279
Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password.
CVE-2026-103279
Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all ...
GHSA-v827-452p-mh2j
Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-103279 Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password. | CVSS3: 6.8 | 0% Низкий | 3 дня назад |
| CVE-2026-103279 Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all ... | CVSS3: 6.8 | 0% Низкий | 3 дня назад |
| GHSA-v827-452p-mh2j Ghost versions from 3.10.0 before 6.34.0 fail to fully invalidate all sessions after a password change. Attackers with a stolen session cookie can maintain access to user accounts even after the associated user changes their password. | CVSS3: 6.8 | 0% Низкий | 3 дня назад |
Уязвимостей на страницу