Threats tagged 'ghsa-vp93-335x-hgfh'

Omnispace Agora Project versions before 26.10.0 have a session fixation vulnerability that allows remote attackers to hijack authenticated sessions. The vulnerability arises because the application does not regenerate the session ID upon successful login, enabling attackers to plant a known session identifier in a victim's browser before authentication and then gain unauthorized access after login.