Session Fixation in fossbilling/fossbilling
CVE-2023-3394

6.8MEDIUM

Key Information:

Vendor

Fossbilling

Status
Fossbilling/fossbilling
Vendor
CVE Published:
23 June 2023

What is CVE-2023-3394?

Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1.

Affected Version(s)

fossbilling/fossbilling < 0.5.1

References

https://huntr.dev/bounties/84bf3e85-cdeb-4b8d-9ea4-74156d...
https://github.com/fossbilling/fossbilling/commit/b9c35a1...

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.