Threats tagged 'ghsa-q8r8-h2xj-8948'

This vulnerability involves a flaw in a self-developed session management system where an attacker who can spoof both the IP address and User-Agent of a logged-in user can hijack that user's session. Additionally, if two users access the web interface from the same IP address, they may be logged in as each other due to the session management flaw.