CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS
Percentile
71.8%
SENCHA SNS is an open source SNS software. SENCHA SNS contains a session fixation vulnerability.
A remote, unauthenticated attacker may impersonate an honest user of the affected product. As a result, information may be altered or obtained.
Update the Software
Update to the latest version provided by the developer.