Vulnerabilities > Gibbonedu > High

DATE CVE VULNERABILITY TITLE RISK
2023-11-14 CVE-2023-45880 Path Traversal vulnerability in Gibbonedu Gibbon
GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder.
network
low complexity
gibbonedu CWE-22
7.2
2022-05-25 CVE-2022-27305 Session Fixation vulnerability in Gibbonedu Gibbon
Gibbon v23 does not generate a new session ID cookie after a user authenticates, making the application vulnerable to session fixation.
network
low complexity
gibbonedu CWE-384
8.8