CVE-2008-4689

No fix known EPSS 2%

Mantis before 1.1.3 does not unset the session cookie during logout, which makes it easier for remote attackers to hijack sessions.

Published 2008-10-22 · CVE record · OSV

Products: mantis