Session Fixation in Subrion CMS

2021-06-2215:23:04

CWE-384

GitHub Advisory Database

github.com

0.001 Low

EPSS

Percentile

47.2%

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.

CPENameOperatorVersion
intelliants/subrionle4.2.1

CPE	Name	Operator	Version
	intelliants/subrion	le	4.2.1

References

github.com/advisories/GHSA-qpxw-6473-ppww

github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation

nvd.nist.gov/vuln/detail/CVE-2020-12467

0.001 Low

EPSS

Percentile

47.2%

Related for GHSA-QPXW-6473-PPWW