EUVD-2022-6019

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Silverstripe framework allows Session Fixation vulnerability in versions up to 4.10

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2022-24444	28 Jun 202222:15	–	attackerkb
Circl	CVE-2022-24444	29 Jun 202202:36	–	circl
CNNVD	silverstripe framework 授权问题漏洞	28 Jun 202200:00	–	cnnvd
CVE	CVE-2022-24444	28 Jun 202221:30	–	cve
Cvelist	CVE-2022-24444	28 Jun 202221:30	–	cvelist
Friends Of PHP	CVE-2022-24444: Hybridsessions does not expire session id on logout	27 Jun 202205:27	–	friendsofphp
Github Security Blog	Hybridsessions does not expire session id on logout	29 Jun 202222:09	–	github
NVD	CVE-2022-24444	28 Jun 202222:15	–	nvd
OSV	BIT-SILVERSTRIPE-2022-24444	6 Mar 202411:05	–	osv
OSV	CVE-2022-24444	28 Jun 202222:15	–	osv

[
  {
    "enisaIdVendor": [
      {
        "id": "7f9d4e6e-4762-35c5-b1a6-c1906a13519b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "ef5a7ad2-6b08-3f6d-8adf-8c3e9d160614",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-24444
docs	www.docs.silverstripe.org/en/4/changelogs/4.10.1
forum	www.forum.silverstripe.org/c/releases
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/silverstripe/hybridsessions/CVE-2022-24444.yaml
silverstripe	www.silverstripe.org/blog/tag/release
silverstripe	www.silverstripe.org/download/security-releases
silverstripe	www.silverstripe.org/download/security-releases/cve-2022-24444
docs	www.docs.silverstripe.org/en/4/changelogs/4.10.1/

03 Oct 2025 20:07Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

CVSS 26.4

EPSS0.00273

silverstripe framework session fixation vulnerability security