CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

filegator 授权问题漏洞

filegator is a free, open source, self-hosted web application. It is used to manage files and folders. A security vulnerability exists in filegator versions prior to 7.8.0, which stems from the updateUser function not resetting a user's session...

filegator 路径遍历漏洞

filegator is a free, open source, self-hosted web application. It is used to manage files and folders. A security vulnerability exists in filegator versions prior to 7.8.0, which stems from a path traversal vulnerability...

Session Fixation in filegator/filegator

✍️ Description the password reset function is vulnerable to session fixation bug, it's a small low hanging bug 🕵️‍♂️ Proof of Concept open filegator and login with similar accounts in multiple browsers. change the password of the user in one browser and reload the other login session. we can see...