recrystallize_server vulnerabilities

1 known vulnerability in recrystallize_server from Recrystallize Software. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  recrystallize_server: Improper Authentication

  CVE-2024-26331Apr 30, 2024Recrystallize SoftwareEPSS 51.3%

  ReCrystallize Server 5.10.0.0 uses a authorization mechanism that relies on the value of a cookie, but it does not bind the cookie value to a session ID. Attackers can easily modify the cookie value, within a browser or by implementing client-side code outside