CVE-2022-25896
Session Fixation
This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.
CVSS 3.1 · 4.8 Medium
EPSS 1.1%
KEV · Not listed
Vendors
Products