Session Fixation in Subrion CMS

2021-06-2215:23:04

Google

osv.dev

0.001 Low

EPSS

Percentile

47.5%

JSON

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.

CPENameOperatorVersion
intelliants/subrioneq4.0.2
intelliants/subrioneq4.1.0
intelliants/subrioneq4.1.2
intelliants/subrioneq4.1.3
intelliants/subrioneq4.0.5
intelliants/subrioneq4.0.0
intelliants/subrioneq4.0.1
intelliants/subrioneq4.1.5
intelliants/subrioneq4.1.4
intelliants/subrioneq4.0.4

Name	Operator	Version
intelliants/subrion	eq	4.0.2
intelliants/subrion	eq	4.1.0
intelliants/subrion	eq	4.1.2
intelliants/subrion	eq	4.1.3
intelliants/subrion	eq	4.0.5
intelliants/subrion	eq	4.0.0
intelliants/subrion	eq	4.0.1
intelliants/subrion	eq	4.1.5
intelliants/subrion	eq	4.1.4
intelliants/subrion	eq	4.0.4