Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Enonic XP Session Fixation Vulnerability
Vulnerability Description
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
CVSS Information
N/A
Vulnerability Type
会话固定
Vulnerability Title
Enonic XP 授权问题漏洞
Vulnerability Description
Enonic XP是Enonic公司的一个基于Java和Elasticsearch的免费开源Web应用程序平台和内容管理系统。 Enonic XP 7.7.4之前版本存在安全漏洞，该漏洞源于缺乏无效会话属性。攻击者利用该漏洞可以使用先前的会话。
CVSS Information
N/A
Vulnerability Type
N/A