Security Advisory
CVE-2024-23679
9.8
CRITICAL
Vulnerability Description
Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.
Published Date
January 19, 2024
Official Source
NIST NVD Advisory