PT-2020-20409

Name of the Vulnerable Software and Affected Versions ZendTo versions prior to 5.22-2 Beta Description The issue is related to the lib/NSSDropbox.php file in ZendTo, where it failed to properly check for equality when validating the session cookie. This allows an attacker to gain administrative...