https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:17:18 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-47234 <p>Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent auto-login cookie. Anyone with access to the log sink can recover live bearer-style credentials from the logs. Version 5.0.10 contains a fix.</p> <p>Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent auto-login cookie. Anyone with access to the log sink can recover live bearer-style credentials from the logs. Version 5.0.10 contains a fix.</p> https://db.gcve.eu/vuln/fkie_cve-2026-47234 https://db.gcve.eu/vuln/ghsa-mch8-wf3h-6x88 <p><strong>Affected:</strong> Packagist: admidio/admidio</p> <p>## Summary</p> <p>When debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent auto-login cookie. Anyone with access to the log sink can recover live bearer-style credentials from the logs.</p> <p>## Vulnerable Code Links</p> <p>- https://github.com/Admidio/admidio/blob/v5.0.9/src/Session/Entity/Session.php#L533-L540 - https://github.com/Admidio/admidio/blob/v5.0.9/src/Session/Entity/Session.php#L615-L617</p> <p>## Vulnerable Code</p> <p>```php // src/Session/Entity/Session.php $gLogger-&gt;info(&#39;Set Cookie!&#39;, array( &#39;name&#39; =&gt; $name, &#39;value&#39; =&gt; $value, &#39;expire&#39; =&gt; $expire, &#39;path&#39; =&gt; $path, &#39;domain&#39; =&gt; $domain, &#39;secure&#39; =&gt; $secure, &#39;httpOnly&#39; =&gt; $httpOnly, &#39;sameSite&#39; =&gt; &#39;lax&#39; )); ... session_start(); $gLogger-&gt;info(&#39;Session Started!&#39;, array( &#39;name&#39; =&gt; $sessionName, &#39;limit&#39; =&gt; $limit, &#39;path&#39; =&gt; $path, &#39;domain&#39; =&gt; $domain, &#39;secure&#39; =&gt; $secure, &#39;httpOnly&#39; =&gt; $httpOnly, &#39;sameSite&#39; =&gt; &#39;lax&#39;, &#39;sessionId&#39; =&gt; session_id() )); ```</p> <p>## What Does The Code Mean</p> <p>Every time Admidio sets a cookie, it writes the raw cookie value to the application log. When a session starts, it writes the active session identifier too.</p> <p>## Why The Code Is Vulnerable</p> <p>Session IDs and persistent auto-login values are credentials. Logging them turns the log file into a credential store and expands the trust boundary to anyone who can read logs, backups, or external log aggregation o…</p> <p><strong>Affected:</strong> Packagist: admidio/admidio</p> <p>## Summary</p> <p>When debug logging is enabled, `Session::setCookie()` logs full cookie values and `Session::start()` logs the current session ID. In a real Admidio deployment this includes both the active session cookie and the persistent auto-login cookie. Anyone with access to the log sink can recover live bearer-style credentials from the logs.</p> <p>## Vulnerable Code Links</p> <p>- https://github.com/Admidio/admidio/blob/v5.0.9/src/Session/Entity/Session.php#L533-L540 - https://github.com/Admidio/admidio/blob/v5.0.9/src/Session/Entity/Session.php#L615-L617</p> <p>## Vulnerable Code</p> <p>```php // src/Session/Entity/Session.php $gLogger-&gt;info(&#39;Set Cookie!&#39;, array( &#39;name&#39; =&gt; $name, &#39;value&#39; =&gt; $value, &#39;expire&#39; =&gt; $expire, &#39;path&#39; =&gt; $path, &#39;domain&#39; =&gt; $domain, &#39;secure&#39; =&gt; $secure, &#39;httpOnly&#39; =&gt; $httpOnly, &#39;sameSite&#39; =&gt; &#39;lax&#39; )); ... session_start(); $gLogger-&gt;info(&#39;Session Started!&#39;, array( &#39;name&#39; =&gt; $sessionName, &#39;limit&#39; =&gt; $limit, &#39;path&#39; =&gt; $path, &#39;domain&#39; =&gt; $domain, &#39;secure&#39; =&gt; $secure, &#39;httpOnly&#39; =&gt; $httpOnly, &#39;sameSite&#39; =&gt; &#39;lax&#39;, &#39;sessionId&#39; =&gt; session_id() )); ```</p> <p>## What Does The Code Mean</p> <p>Every time Admidio sets a cookie, it writes the raw cookie value to the application log. When a session starts, it writes the active session identifier too.</p> <p>## Why The Code Is Vulnerable</p> <p>Session IDs and persistent auto-login values are credentials. Logging them turns the log file into a credential store and expands the trust boundary to anyone who can read logs, backups, or external log aggregation o…</p> https://db.gcve.eu/vuln/ghsa-mch8-wf3h-6x88