Session Fixation

Overview Affected versions of this package are vulnerable to Session Fixation via the login process in AuthController.php. An attacker can gain unauthorized access to private content and perform actions with the victim's privileges by setting or obtaining a victim's pre-authentication session...