CVE-2014-125048

Medium

Description

A vulnerability, which was classified as critical, has been found in kassi xingwall. This issue affects some unknown processing of the file app/controllers/oauth.js. The manipulation leads to session fixiation. The patch is named e9f0d509e1408743048e29d9c099d36e0e1f6ae7. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217559.

SeverityMedium

CVSS6.3

Exploit probability—

ProductKluks Xingwall

PublishedJan 6, 2023

First seenJan 6, 2023

Weakness typeCWE-384CWE-384

How to fix

Update

kluks xingwalle9f0d509e1408743048e29d9c099d36e0e1f6ae7 or later

Patches

github.com/kassi/xingwall/commit/e9f0d509e1408743048e29d9c099d36e0e1f6ae7

Affected products

Product	Affected versions	Fixed in
kluks xingwall	v < e9f0d509e1408743048e29d9c099d36e0e1f6ae7	e9f0d509e1408743048e29d9c099d36e0e1f6ae7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.