CVE-2022-27305

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation...

CVE-2022-27305

CVE-2022-27305 affects Gibbon v23. After authentication, the application does not generate a new session ID cookie, enabling session fixation risks. This detail is consistently reported across multiple sources (NVD entry for CVE-2022-27305; Red Hat/CVE pages; OSV/PRION/CVE records; CNNVD entry). ...

CVE-2022-27305

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation...

Session Fixation

filegator/filegator is vulnerable to session fixation. The vulnerability exists in the authenticate function in JsonFile.php due to invalid session generation on user update which allows a malicious user to hijack the session...

GHSA-47VG-483W-HP3M Improper user session handling in filegator

FileGator prior to version 7.8.0 is vulnerable to session fixation...

Gibbon 授权问题漏洞

Gibbon is a school platform that solves real-world problems that educators encounter every day. A security vulnerability exists in Gibbon version v23 that stems from the application not generating a new session ID cookie after a user is authenticated.The application is vulnerable to session...

Session fixation vulnerability in Jenkins

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. This vulnerability was introduced in Jenkins 2.266 and LTS 2.277.1. Jenkins 2.300, LTS 2.289.2...

GHSA-4WR9-2XC6-JMG5 Session fixation vulnerability in Jenkins

Jenkins 2.299 and earlier, LTS 2.289.1 and earlier does not invalidate the previous session on login. This allows attackers to use social engineering techniques to gain administrator access to Jenkins. This vulnerability was introduced in Jenkins 2.266 and LTS 2.277.1. Jenkins 2.300, LTS 2.289.2...

Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation

A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

GHSA-682G-C99V-9R2G Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation

A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

Magento 2 Community Edition Session Fixation Check

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

GHSA-V797-HFV8-V2XM Magento 2 Community Edition Session Fixation Check

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

CVE-2022-1849

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

Session fixation

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849

CVE-2022-1849 affects filegator/filegator prior to 7.8.0. The root cause is in the updateUser function, where the user’s session is not reset properly, leading to session fixation and potential session hijack. Multiple sources corroborate improper session handling and a fixed version release (7.8...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

Session Fixation

🔒️ Requirements None. 📝 Description The updateUser function does not reset user's session. 🕵️‍♂️ Proof of Concept Use two browsers and on the first, update the second user's session to delete his privileges. Going to the second, you and refreshing the page, you will that the user have lost his...

Session Fixation

Overview passport is a Simple, unobtrusive authentication for Node.js. Affected versions of this package are vulnerable to Session Fixation. When a user logs in or logs out, the session is regenerated instead of being closed. Remediation Upgrade passport to version 0.6.0 or higher. References -...