Design/Logic Flaw

2023-11-2100:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

user cookie

account takeover

session access

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

JSON

Dev blog v1.0 allows to exploit an account takeover through the “user” cookie. With this, an attacker can access any user’s session just by knowing their username.

CPENameOperatorVersion
dev_blogeq1.0

CPE	Name	Operator	Version
	dev_blog	eq	1.0

References

fluidattacks.com/advisories/almighty/

github.com/Armanidrisi/devblog/