| Package | Affected versions | Patched versions |
|---|---|---|
| gibbon | < 23.0.02 | 23.0.02 |
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free