Lucene search
Veracode Vulnerability DatabaseVERACODE:38922HistoryJan 19, 2023 - 4:54 a.m.
Session Fixation
2023-01-1904:54:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
15
session fixation
github.com/kubeoperator/kubepi
vulnerability
insufficient session expiration
hijack
0.001 Low
EPSS
Percentile
30.6%
github.com/KubeOperator/kubepi is vulnerable to Session Fixation. The vulnerability exists due to insufficient session expiration mechanisms in the library, allowing an attacker to hijack the legitimate user sessions.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/kubeoperator/kubepi | le | v1.6.3 | |
| github.com/kubeoperator/kubepi | le | v1.6.3 |
Related
cve
cve
CVE-2023-22479
2023-01-10 21:15:12
osv
osv
CVE-2023-22479
2023-01-10 21:15:12
gitlab
gitlab
Session Fixation
2023-01-10 00:00:00
Duplicate of ./go/github.com/KubeOperator/KubePi/CVE-2023-22479.yml
2023-01-09 00:00:00
Session Fixation
2023-01-10 00:00:00
nvd
nvd
CVE-2023-22479
2023-01-10 21:15:12
prion
prion
Session fixation
2023-01-10 21:15:00
cvelist
cvelist
CVE-2023-22479 KubePi vulnerable to session fixation attack
2023-01-10 20:34:08
github
github