CVE-2021-22948CWE-79

Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function

published September 23, 2021

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function. Under some circumstances, an attacker could theoretically be able to brute force session IDs in order to take over a specific account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02714 · 85.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-09-23T12:44Z
EPSS history
Timeline
  • 23 SEP 12:44Z
    Vulnerability in the generation of session IDs in revive-adserver < 5.3.0, based on the cryptographically insecure uniqid() PHP function
    cvelistv5