CVE-2023-2105 Session Fixation in alextselegidis/easyappointments

Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-2105 Session Fixation in alextselegidis/easyappointments

Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0...

CVE-2023-2105

CVE-2023-2105 concerns the Easy!Appointments project by alextselegidis. The issue is a session fixation vulnerability where the application does not generate a new ea_session cookie after user authentication, allowing a malicious actor to inject a session cookie and gain access after login. The f...