| Package | Affected versions | Patched versions |
|---|---|---|
| drupal | ≥ 5.0, < 5.9≥ 6.0, < 6.3 | 5.96.3 |
Session fixation vulnerability in Drupal 5.x before 5.9 and 6.x before 6.3, when contributed modules "terminate the current request during a login event," allows remote attackers to hijack web sessions via unknown vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free