GitHub Advisoryadvisory · Packagist

GHSA-47vg-483w-hp3m Improper user session handling in filegator

MEDIUM Published 2022-05-25 Modified 2022-06-06 Official page ↗

Aliases: CVE-2022-1849
Ecosystem: Packagist
Packages: filegator/filegator
Severity: Moderate
CVSS vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weaknesses: CWE-384
Reviewed: 2022-05-25

Affected packages

• Packagist filegator/filegator: < 7.8.0 → fixed in 7.8.0

Description

FileGator prior to version 7.8.0 is vulnerable to session fixation.

Related

Alias · CVE (1)

CVE-2022-1849 Session Fixation in GitHub repository filegator/filegator prior to 7.8.0. vulnerability

Weakness · CWE (1)

CWE-384 Session Fixation weakness

References