CVE-2020-12467 - Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie

MEDIUM

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie

Published Apr 29, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.94%

Subrion CMS 4.2.1 allows session fixation via an alphanumeric value in a session cookie.

No remediation recorded yet.

Weaknesses (1)

CWE-384

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1384		Advisory
https://github.com/advisories/GHSA-qpxw-6473-ppww		Advisory
https://github.com/belong2yourself/vulnerabilities/tree/master/Subrion%20CMS/Session%20Fixation		x_refsource_MISCExploitThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-12467