| Package | Affected versions | Patched versions |
|---|---|---|
| cgilua | = 5.2≥ 5.0.0, ≤ 5.0.1≥ 5.1.0, ≤ 5.1.4 |
The session.lua library in CGILua 5.0.x uses sequential session IDs, which makes it easier for remote attackers to predict the session ID and hijack arbitrary sessions. NOTE: this vulnerability was SPLIT from CVE-2014-2875.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free