Session fixation

2024-01-1013:15:00

PRIOn knowledge base

www.prio-n.com

session fixation

remote attacker

delete arbitrary files

file system

crafted url

victim’s session

nvd

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

33.4%

The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP
request through a victim’s session.

CPENameOperatorVersion
nexo-osge1000
nexo-osle1500

CPE	Name	Operator	Version
	nexo-os	ge	1000
	nexo-os	le	1500

References

psirt.bosch.com/security-advisories/BOSCH-SA-711465.html