User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation in the CookieAuthenticator process when unencrypted, forgeable legacy tokens are used. An attacker can gain unauthorized access or cause CPU or memory exhaustion by crafting and submitting malicious authentication...