Bludit Session Fixation Vulnerability

A session fixation vulnerability has been identified in Bludit versions prior to 3.17.2. This issue allows an attacker to set a session identifier for a victim before authentication, with the session ID remaining unchanged after the victim logs in. As a result, the attacker can hijack the authenticated session.

Impact

Exploitation of this vulnerability allows for session hijacking, where an attacker can take over an authenticated user's session.

Remediation

Users can upgrade to Bludit version 3.17.2 or later to address this vulnerability.