Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation

A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

GHSA-682G-C99V-9R2G Jenkins Gitlab Authentication Plugin vulnerable to Session Fixation

A session fixation vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows unauthorized attackers to impersonate another user if they can control the pre-authentication session...

GHSA-V797-HFV8-V2XM Magento 2 Community Edition Session Fixation Check

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

Magento 2 Community Edition Session Fixation Check

A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules. This impacts Magento 1.x prior to 1.9.4.2, Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9 and Magento 2.3 prior to 2.3.2...

CVE-2022-1849

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

Session fixation

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849

CVE-2022-1849 affects filegator/filegator prior to 7.8.0. The root cause is in the updateUser function, where the user’s session is not reset properly, leading to session fixation and potential session hijack. Multiple sources corroborate improper session handling and a fixed version release (7.8...

CVE-2022-1849

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

CVE-2022-1849 Session Fixation in filegator/filegator

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

PT-2022-14167

Name of the Vulnerable Software and Affected Versions filegator/filegator versions prior to 7.8.0 Description The issue is related to session fixation in the GitHub repository filegator/filegator. No information is provided about the estimated number of potentially affected devices worldwide or...

CVE-2022-1849: Session Fixation

Session Fixation in GitHub repository filegator/filegator prior to 7.8.0...

Session Fixation

🔒️ Requirements None. 📝 Description The updateUser function does not reset user's session. 🕵️‍♂️ Proof of Concept Use two browsers and on the first, update the second user's session to delete his privileges. Going to the second, you and refreshing the page, you will that the user have lost his...

Session Fixation

Overview passport is a Simple, unobtrusive authentication for Node.js. Affected versions of this package are vulnerable to Session Fixation. When a user logs in or logs out, the session is regenerated instead of being closed. Remediation Upgrade passport to version 0.6.0 or higher. References -...

GHSA-8JFX-H6Q2-V4G3 Jenkins session fixation vulnerability

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies...

Jenkins session fixation vulnerability

Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies...

GHSA-W7H9-8WR4-HWQH OpenStack Horizon Session Fixation

Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...

OpenStack Horizon Session Fixation

Session fixation vulnerability in OpenStack Dashboard Horizon folsom-1 and 2012.1 allows remote attackers to hijack web sessions via the sessionid cookie...

Session fixation

The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's response. This could be used to interact with hosts on the...