← Back

Gamerpolls

gamerpolls

Vendor: Gamerpolls • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-10966
1Gamerpolls
1Gamerpolls
Nov 21, 2024
Jun 5, 2018
N/A· v4
7.3 HIGH· v3
7.5 HIGH· v2
An issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config/initializers/02_passport.js. An attacker can edit the Passport.js contents of the session cookie to contain the ID number of t...Show more
An issue was discovered in GamerPolls 0.4.6, related to config/environments/all.js and config/initializers/02_passport.js. An attacker can edit the Passport.js contents of the session cookie to contain the ID number of the account they wish to take over, and re-sign it using the hard coded secret.Show less