~ / search / GHSA-jr66-9ghf-6gp3

GHSA-jr66-9ghf-6gp3

Froxlor Session Fixation vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-3192

Packages

EcosystemPackageAffectedFixed in
Packagist froxlor/froxlor < 2.1.0 2.1.0

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of froxlor/froxlor prior to release 2.1.0 did not regenerate session ids appropriately which may result in session fixation.

References

External links from the advisory. They lead to third-party sites.