Session Fixation

2023-05-1906:03:46

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

session fixation

easyappointments

vulnerability

EPSS

0.002

Percentile

61.3%

JSON

alextselegidis/easyappointments, is vulnerable to Session Fixation. The vulnerability exists because the library does not properly limit the admin session time, allowing an attacker to use the access token to continue the session without refreshing the token.