CVE Catalog
CVE-2023-3394
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.44%
35th percentile - higher than 35% of all known CVEs
Summary
There is a Session Fixation vulnerability in the GitHub repository fossbilling/fossbilling prior to version 0.5.1.
Risk Assessment
An attacker could take control of a user's session, potentially leading to unauthorized access to data.
Recommendation
It is recommended to upgrade to version 0.5.1 or later to mitigate this vulnerability.
Original NVD description (English source)
Session Fixation in GitHub repository fossbilling/fossbilling prior to 0.5.1.