CVE-2024-23679

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2024-01-19 Modified: 2026-11-08 First seen: 2026-11-08 Status: pending_score

Description

Enonic XP versions less than 7.7.4 are vulnerable to a session fixation issue. An remote and unauthenticated attacker can use prior sessions due to the lack of invalidating session attributes.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
— — 0 < 7.7.4

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.84%
Raw Score 0.008360
Percentile 58.3%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00836
2026-11-12
0.00836
2026-11-10
0.00836
2026-11-09
0.00836
2026-11-08
0.00836

Intelligence Sources

mitre ref →