Lucene search

K
cvelist@huntrdevCVELIST:CVE-2023-3394
HistoryJun 23, 2023 - 6:12 p.m.

CVE-2023-3394 Session Fixation in fossbilling/fossbilling

2023-06-2318:12:04
CWE-384
@huntrdev
www.cve.org
cve-2023-3394
session fixation
fossbilling

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

0.001 Low

EPSS

Percentile

34.0%

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1.

CNA Affected

[
  {
    "vendor": "fossbilling",
    "product": "fossbilling/fossbilling",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.5.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

0.001 Low

EPSS

Percentile

34.0%

Related for CVELIST:CVE-2023-3394