1 matches found
Session Fixation
@fastify/passport is vulnerable to Session Fixation. The vulnerability exists because the user validations do not properly perform in the logIn and logOut functions of SecureSessionManager.ts, which allows an attacker to hijack the victim's session by tossing a valid sessionId cookie in the...
8.1CVSS7.6AI score0.00751EPSS
SaveExploits0References6Affected Software1
20