CVE-2022-24781

Geon (board game) is affected by an authorization issue where malicious users can obtain another user’s uuid, spoof it in the browser console, and take co-ownership of a target session. The root cause is an insecure handling of session ownership tied to UUIDs, enabling session takeover without au...