Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie. Attackers can set malicious OCSESSID cookie values that the server accepts and maintains, enabling session takeover and unauthorized access to user accounts.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
🚨 CRITICAL: CVE-2021-47923 in OpenCart 3.0.3.8. Session fixation via OCSESSID cookie injection. Attacker sets arbitrary session ID, server accepts, session hijack achieved. Patch immediately. https://0x2ed3bb60.xyz/threat/0599db3392afde3b
Post summary
A critical session‑fixation vulnerability in OpenCart 3.0.3.8 is announced with an immediate patch call.
CVE-2021-47923 OpenCart 3.0.3.8 contains a session fixation vulnerability that allows attackers to hijack user sessions by injecting arbitrary values into the OCSESSID cookie. Attac… https://www.cve.org/CVERecord?id=CVE-2021-47923
Post summary
The post announces CVE-2021-47923, a session fixation flaw in OpenCart 3.0.3.8, which lets attackers hijack user sessions by injecting values into the OCSESSID cookie, but it offers no PoC, exploit, or patch information.