Lucene search
GitHub Advisory DatabaseGHSA-JR66-9GHF-6GP3HistoryJun 11, 2023 - 12:30 p.m.
Froxlor Session Fixation vulnerability
2023-06-1112:30:16
CWE-384
GitHub Advisory Database
github.com
6
froxlor
session fixation
vulnerability
software
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
32.6%
Versions of froxlor/froxlor prior to release 2.1.0 did not regenerate session ids appropriately which may result in session fixation.
Affected configurations
Node
froxlorfroxlorRange<2.1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| froxlor/froxlor | lt | 2.1.0 |
Related
osv
osv
Froxlor Session Fixation vulnerability
2023-06-11 12:30:16
CVE-2023-3192
2023-06-11 11:15:42
cve
cve
CVE-2023-3192
2023-06-11 11:15:42
nvd
nvd
CVE-2023-3192
2023-06-11 11:15:42
veracode
veracode
Session Fixation
2023-06-22 14:11:00
huntr
huntr
Session Fixation in https://demo.froxlor.org/
2023-01-30 09:58:40
prion
prion
Session fixation
2023-06-11 11:15:00
cvelist
cvelist
CVE-2023-3192 Session Fixation in froxlor/froxlor
2023-06-11 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
32.6%
Related for GHSA-JR66-9GHF-6GP3