Session management within the web application is incorrect and allows attackers to steal session cookies to perform a multitude of actions that the web app allows on the device.

Related CVEs

CVE-2023-41084

Key Information

GHSA ID

GHSA-c8f6-fgc7-qf74

Published

September 18, 2023 9:30 PM

Last Modified

March 21, 2024 3:35 AM

CVSS Score

9.0 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: August 1, 2025 6:44 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.