Skip to content
OpenAdvisories
High · 8.1 CVE-2021-47663 EUVD-2025-12115GHSA-wwjc-h7f8-cqv5

Improper session handling

Published Apr 24, 2025 · Updated Apr 24, 2025 · Assigned by CERTVDE

Description

Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access.

Affected products

VendorProductAffectedFixed
Franka Robotics Franka Emika Robot 0.0.0 – ≤ 4.0.3 —

References