CVE-2023-42328

Name of the Vulnerable Software and Affected Versions PeppermintLabs Peppermint versions 0.2.4 and earlier

Description The issue allows a remote attacker to obtain sensitive information and execute arbitrary code via the hardcoded session cookie.

Recommendations For PeppermintLabs Peppermint versions 0.2.4 and earlier, consider updating to a version that does not use a hardcoded session cookie to prevent exploitation. As a temporary workaround, consider regenerating or randomizing session cookies to minimize the risk of sensitive information disclosure and arbitrary code execution.