All vulnerabilities

Servers and applications

GHSA-5w43-pp8c-gr85

Backend Session ID Not Regenerated on Login (Session Fixation)

Severity
Low 3.1
Published
1 Nov 2026
Last changed
1 Nov 2026
Added to UpHeron
3 Nov 2026
Fixed in
4.3.3
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
October CMSServers and applications · github:octobercms/october
  • From 4.3.0 before 4.3.3

References