Keplerproject Cgilua
3 CVEs affecting Keplerproject Cgilua. Latest disclosed: 2020-02-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-2875 | Medium | 6.1 | 2020-02-06 | The session.lua library in CGILua 5.2 alpha 1 and 5.2 alpha 2 uses weak session IDs generated based on OS time, which allows remote attackers to hijack arbitra… |
CVE-2014-10400 | Medium | 6.1 | 2020-02-06 | The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary… |
CVE-2014-10399 | Medium | 6.1 | 2020-02-06 | The session.lua library in CGILua 5.1.x uses the same ID for each session, which allows remote attackers to hijack arbitrary sessions. NOTE: this vulnerability… |