Skip to content
OpenAdvisories

Archive

17 June 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability

    During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in…

  • Critical 9.8

    CodeIgniter Session Fixation Vulnerability

    A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.