Beveiligingsadvies

CVE-2026-104469

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-10-02 11:38:34

Laatst bijgewerkt 2026-10-06 16:20:33

Toegewezen door VulnCheck

CVSS-score 7.6

Status PUBLISHED

Beschrijving

YesWiki before 4.6.7 contains a session fixation vulnerability that allows attackers to hijack authenticated sessions because login does not regenerate the PHP session ID. Attackers who set or learn a victim's pre-authentication YesWiki-* session cookie can reuse it after login to access private content and perform actions with the victim's privileges.

← Alle CVE's bekijken Bekijk op cve.org ↗