CVE-2022-3959

Source
https://nvd.nist.gov/vuln/detail/CVE-2022-3959
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3959.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3959
Published
2022-11-11T16:15:16Z
Modified
2025-01-15T02:36:25.494693Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is some unknown functionality of the component Session Hash Handler. The manipulation leads to small space of random values. The attack may be launched remotely. Upgrading to version 1.8.2 is able to address this issue. The name of the patch is c0d48da99f66aaada17bcd28b07741cac8697647. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213464.

References

Affected packages

Git / github.com/drogonframework/drogon

Affected ranges

Type
GIT
Repo
https://github.com/drogonframework/drogon
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

v1.*

v1.0.0
v1.0.0-beta1
v1.0.0-beta10
v1.0.0-beta11
v1.0.0-beta12
v1.0.0-beta13
v1.0.0-beta14
v1.0.0-beta15
v1.0.0-beta16
v1.0.0-beta17
v1.0.0-beta18
v1.0.0-beta19
v1.0.0-beta2
v1.0.0-beta20
v1.0.0-beta21
v1.0.0-beta3
v1.0.0-beta4
v1.0.0-beta5
v1.0.0-beta6
v1.0.0-beta7
v1.0.0-beta8
v1.0.0-beta9
v1.1.0
v1.2.0
v1.3.0
v1.4.0
v1.4.1
v1.5.0
v1.5.1
v1.6.0
v1.7.0
v1.7.1
v1.7.2
v1.7.3
v1.7.4
v1.7.5
v1.8.0
v1.8.1