Description
SilverStripe through 4.3.3 allows session fixation in the "change password" form.
Remediation
References
Related Vulnerabilities
WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce CSV Injection (1.6.7)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5297)
Artifactory Insufficiently Protected Credentials Vulnerability (CVE-2020-2165)
Drupal Core 9.3.x Multiple Vulnerabilities (9.3.0 - 9.3.7)
Zope Web Application Server Other Vulnerability (CVE-2006-3458)