GHSA-jr66-9ghf-6gp3
Suggest an improvement- Source
- https://github.com/advisories/GHSA-jr66-9ghf-6gp3
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-jr66-9ghf-6gp3/GHSA-jr66-9ghf-6gp3.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-jr66-9ghf-6gp3
- Aliases
- Published
- 2023-06-11T12:30:16Z
- Modified
- 2023-11-05T05:24:41.323866Z
- Severity
-
- 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
- Summary
- Froxlor Session Fixation vulnerability
- Details
-
Versions of froxlor/froxlor prior to release 2.1.0 did not regenerate session ids appropriately which may result in session fixation.
- Database specific
{ "severity": "MODERATE", "github_reviewed": true, "cwe_ids": [ "CWE-384" ], "nvd_published_at": "2023-06-11T11:15:42Z", "github_reviewed_at": "2023-06-12T18:38:30Z" }- References
Affected packages
Packagist / froxlor/froxlor
Package
- Name
- froxlor/froxlor
- Purl
- pkg:composer/froxlor/froxlor
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed2.1.0
Affected versions
0.*
0.10.0-rc1
0.10.0-rc2
0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.5
0.10.6
0.10.7
0.10.8
0.10.9
0.10.10
0.10.11
0.10.12
0.10.13
0.10.14
0.10.15
0.10.16
0.10.17
0.10.18
0.10.19
0.10.20
0.10.21
0.10.22
0.10.23
0.10.23.1
0.10.24
0.10.25
0.10.26
0.10.27
0.10.28
0.10.29
0.10.29.1
0.10.30
0.10.31
0.10.32
0.10.33
0.10.34
0.10.34.1
0.10.35
0.10.35.1
0.10.36
0.10.37
0.10.38
0.10.38.1
0.10.38.2
0.10.38.3
2.*
2.0.0
2.0.1
2.0.2
2.0.3
2.0.4
2.0.5
2.0.6
2.0.7
2.0.8
2.0.9
2.0.10
2.0.11
2.0.12
2.0.13
2.0.14
2.0.15
2.0.16
2.0.17
2.0.18
2.0.19
2.0.20
2.0.21
2.0.22
2.0.23
2.0.24
2.1.0-beta1
2.1.0-beta2
2.1.0-rc1