PT-2026-5188 · Unknown · 66Biolinks
CVE-2025-69602
·
Publicado
2026-01-28
·
Atualizado
2026-02-09
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
66biolinks version 62.0.0
Description
The application does not regenerate the session identifier after successful authentication, leading to a session fixation issue. This allows an attacker who can set or predict a session ID to potentially hijack an authenticated session, as the same session cookie value is reused for users logging in from the same browser.
Recommendations
Update to a newer version that regenerates the session identifier after successful authentication.
Exploit
Correção
Session Fixation
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
66Biolinks