CVE-2023-6144 — Dev Blog v1.0 - ATO
Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username.
Published: 2023-11-20 · CVSS: 9.1 · CVSS 3.1
Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their username.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7