Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35687
HistoryMay 25, 2022 - 5:05 a.m.

Session Fixation

2022-05-2505:05:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
filegator
session fixation
vulnerability
jsonfile.php
malicious user
hijack

EPSS

0.001

Percentile

21.4%

filegator/filegator is vulnerable to session fixation. The vulnerability exists in the authenticate function in JsonFile.php due to invalid session generation on user update which allows a malicious user to hijack the session

EPSS

0.001

Percentile

21.4%

Related for VERACODE:35687