Session Fixation Vulnerability in Gibbon Education Platform by Gibbon

CVE-2022-27305

What is CVE-2022-27305?

The Gibbon Education Platform v23 suffers from a session fixation vulnerability related to its user authentication process. This issue arises due to the lack of a new session ID cookie generation immediately after a user successfully authenticates. As a result, attackers can exploit this weakness to hijack user sessions, potentially leading to unauthorized access and data compromise. It is crucial for users and administrators to remain vigilant and consider applying necessary patches or mitigating measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References