What is the CVSS score of CVE-2024-0351?

CVE-2024-0351 has a CVSS 3.1 base score of 3.1 (Low). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Session Fixation are affected by CVE-2024-0351?

CVE-2024-0351 is a low-severity vulnerability in A vulnerability classified as problematic (CVSS 3.1).

Is there a public PoC exploit available for CVE-2024-0351?

Yes, a public proof-of-concept exploit is available for CVE-2024-0351. Prioritise patching immediately. EPSS: 0.0%.

How to fix or mitigate CVE-2024-0351?

During next maintenance window: Apply vendor patches when convenient. Monitor vendor channels for updates.

Session Fixation CVE-2024-0351

LOW

Session Fixation (CWE-384)

2024-01-09 cna@vuldb.com

Information Disclosure Session Fixation Engineers Online Portal

3.1

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:34 vuln.today

PoC Detected

Nov 21, 2024 - 08:46 vuln.today

Public exploit code

CVE Published

Jan 09, 2024 - 23:15 nvd

LOW 3.1

DescriptionNVD

A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250119.

AnalysisAI

A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-384. A vulnerability classified as problematic has been found in SourceCodester Engineers Online Portal 1.0. This affects an unknown part. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250119. Affected products include: Engineers Online Portal Project Engineers Online Portal.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-0351 vulnerability details – vuln.today

Back

Session Fixation CVE-2024-0351

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

Share

External POC / Exploit Code