Lucene search
Veracode Vulnerability DatabaseVERACODE:13638HistoryApr 15, 2019 - 2:18 a.m.
Insecure Session Management
2019-04-1502:18:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.003
Percentile
71.5%
contao/core-bundle contains an insecure session management. The old opt-in tokens are not invalidated when a new token is confirmed.
Related
prion
prion
Code injection
2019-04-17 19:29:00
cvelist
cvelist
CVE-2019-10643
2019-04-17 18:50:52
friendsofphp
friendsofphp
Confirming an opt-in token does not invalidate previous opt-in tokens
2019-04-09 12:21:00
Confirming an opt-in token does not invalidate previous opt-in tokens
2019-04-09 12:21:00
cve
cve
CVE-2019-10643
2019-04-17 19:29:00
nvd
nvd
CVE-2019-10643
2019-04-17 19:29:00
osv
osv
CVE-2019-10643
2019-04-17 19:29:00
Contao Does Not Expire Tokens Correctly
2022-05-13 01:07:57
contao
contao
Invalidating opt-in tokens
2019-04-09 00:00:00
github
github
Contao Does Not Expire Tokens Correctly
2022-05-13 01:07:57