medium6.3
CVE-2019-12203
SilverStripe through 4.3.3 allows session fixation in the "change password" form.
Impact
SilverStripe through 4.3.3 allows session fixation in the "change password" form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Silverstripe | Silverstripe | through 4.3.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://forum.silverstripe.org/c/releases
- https://www.silverstripe.org/download/security-releases/
- https://www.silverstripe.org/download/security-releases/CVE-2019-12203
- https://forum.silverstripe.org/c/releases
- https://www.silverstripe.org/download/security-releases/
- https://www.silverstripe.org/download/security-releases/CVE-2019-12203