CVE-2022-1849: Improper user session handling in filegator
FileGator prior to version 7.8.0 is vulnerable to session fixation.
Other sources
Improper user session handling in filegator
— Packagist
Session Fixation in GitHub repository filegator/filegator prior to 7.8.0.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/filegator/filegatorto a version that resolves this vulnerability.Fixed in 7.8.0 - Upgrade
Upgrade
filegator/filegatorto a version that resolves this vulnerability.Fixed in 7.8.0
Event History
Frequently Asked Questions
Which deployments are affected?
Filegator versions prior to 7.8.0 are affected. The issue is remotely exploitable over the network.
What access does an attacker need to exploit this issue?
The CVSS vector indicates low privileges are required and no user interaction is needed. Successful exploitation can affect confidentiality and integrity at a low impact level.
What should teams do to remediate it?
Update Filegator to version 7.8.0 or later, as a patch is available.