Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Fluid Attacks
Published: 2023-11-20T23:20:38.606Z
Updated: 2024-08-02T08:21:17.568Z
Reserved: 2023-11-14T23:57:14.918Z
Link: CVE-2023-6144
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-11-21T00:15:07.353
Modified: 2024-11-21T08:43:14.430
Link: CVE-2023-6144
Redhat
No data.