| Package | Affected versions | Patched versions |
|---|---|---|
| serene bach | = 1.18r= 1.19r= 2.05r= 2.08d= 2.09r= 3.00≤ 2.20r |
SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free