CVE-2022-27305

Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation...

CVE-2022-27305

CVE-2022-27305 affects Gibbon v23. After authentication, the application does not generate a new session ID cookie, enabling session fixation risks. This detail is consistently reported across multiple sources (NVD entry for CVE-2022-27305; Red Hat/CVE pages; OSV/PRION/CVE records; CNNVD entry). ...