CVE-2022-27305

2022-05-2516:15:08

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.0%

JSON

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.

CPENameOperatorVersion
coreeq13.0.02
coreeq8.0.02
coreeq20.0.00
coreeq8.0.01
coreeqPR_Timetable_Tools
coreeq13.0.01
coreeq8.0.04
coreeq22.0.00
coreeq16.0.00
coreeq10.0.00

Name	Operator	Version
core	eq	13.0.02
core	eq	8.0.02
core	eq	20.0.00
core	eq	8.0.01
core	eq	PR_Timetable_Tools
core	eq	13.0.01
core	eq	8.0.04
core	eq	22.0.00
core	eq	16.0.00
core	eq	10.0.00

Rows per page:

1-10 of 431

References

gibbon.com

gibbonedu.com

github.com/GibbonEdu/core/security/advisories/GHSA-4mq5-8jvh-qq3p