https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:26:54 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-213981 EUVD-2026-213981 https://cve.radiocsirt.org/vuln/euvd-2026-213981 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2105 <p>Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0.</p> <p>Session Fixation in GitHub repository alextselegidis/easyappointments prior to 1.5.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2105 https://cve.radiocsirt.org/vuln/ghsa-4qmm-cv4r-qfr4 <p><strong>Affected:</strong> Packagist: alextselegidis/easyappointments</p> <p>alextselegidis/easyappointments is vulnerable to session fixation. The application does not generate a new `ea_session` cookie after the user authenticates. A malicious user may create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker access to the user&#39;s account through the active session. If an attacker conducts this attack against an admin user, the attacker may escalate their privileges with the admin user being unaware.</p> <p>This issue is patched in commit 7f37350fab9d729a9350d96369ff0f453cf7b840 and anticipated to be part of version 1.5.0.</p> <p><strong>Affected:</strong> Packagist: alextselegidis/easyappointments</p> <p>alextselegidis/easyappointments is vulnerable to session fixation. The application does not generate a new `ea_session` cookie after the user authenticates. A malicious user may create a new session cookie value and inject it to a victim. After the victim logs in, the injected cookie becomes valid, giving the attacker access to the user&#39;s account through the active session. If an attacker conducts this attack against an admin user, the attacker may escalate their privileges with the admin user being unaware.</p> <p>This issue is patched in commit 7f37350fab9d729a9350d96369ff0f453cf7b840 and anticipated to be part of version 1.5.0.</p> https://cve.radiocsirt.org/vuln/ghsa-4qmm-cv4r-qfr4 https://cve.radiocsirt.org/vuln/gsd-2023-2105 gsd-2023-2105 https://cve.radiocsirt.org/vuln/gsd-2023-2105