Lucene search
Veracode Vulnerability DatabaseVERACODE:32847HistoryNov 09, 2021 - 2:39 a.m.
Insecure Session Management
2021-11-0902:39:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.005 Low
EPSS
Percentile
75.6%
apostrophe uses insecure session management. The session object does not exist in task requests, allowing a malicious user to hijack logged-in user’s sessions recently.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apostrophe | le | 3.3.1 | |
| apostrophe | le | 3.3.1 |
Related
cve
cve
CVE-2021-25979
2021-11-08 15:15:07
cvelist
cvelist
CVE-2021-25979 Apostrophe - Insufficient Session Expiration
2021-11-08 14:20:11
nvd
nvd
CVE-2021-25979
2021-11-08 15:15:07
osv
osv
CVE-2021-25979
2021-11-08 15:15:07
Apostrophe CMS Insufficient Session Expiration vulnerability
2021-11-10 17:02:44
cnvd
cnvd
Apostrophe licensing issue vulnerability
2021-11-10 00:00:00
github
github
Apostrophe CMS Insufficient Session Expiration vulnerability
2021-11-10 17:02:44
prion
prion
Session fixation
2021-11-08 15:15:00