Session Fixation Vulnerability in Gibbon Education Platform by Gibbon

CVE-2022-27305

What is CVE-2022-27305?

The Gibbon Education Platform v23 suffers from a session fixation vulnerability related to its user authentication process. This issue arises due to the lack of a new session ID cookie generation immediately after a user successfully authenticates. As a result, attackers can exploit this weakness to hijack user sessions, potentially leading to unauthorized access and data compromise. It is crucial for users and administrators to remain vigilant and consider applying necessary patches or mitigating measures.

References