CVE-2014-125048
6.3
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Summary
A vulnerability, which was classified as critical, has been found in kassi xingwall. This issue affects some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. The patch is named e9f0d509e1408743048e29d9c099d36e0e1f6ae7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217559.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| kassi | xingwall | n/a | affected |
Weaknesses
- CWE-384: CWE-384 Session Fixiation
ADP Enrichment
CVE Program Container
Additional References
- https://vuldb.com/?id.217559
- https://vuldb.com/?ctiid.217559
- https://github.com/kassi/xingwall/commit/e9f0d509e1408743048e29d9c099d36e0e1f6ae7
References
- https://vuldb.com/?id.217559
- https://vuldb.com/?ctiid.217559
- https://github.com/kassi/xingwall/commit/e9f0d509e1408743048e29d9c099d36e0e1f6ae7
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.