CVE-2022-2820

    Dashboard / Vulnerabilities / CVE-2022-2820

    CVE-2022-2820

    Published: 15 Aug 2022Last Modified: 12 Aug 2026

    Summary: Session Fixation in namelessmc/nameless

    Details: Session Fixation in GitHub repository namelessmc/nameless prior to v2.0.2.

    References: https://huntr.dev/bounties/df06b7d7-6077-43a5-bd81-3cc66f0d4d19, https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2820.json, https://nvd.nist.gov/vuln/detail/CVE-2022-2820, https://github.com/namelessmc/nameless/commit/469bebc17855720e43f0c8209c88a57d2b55f6de

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -26bbbae0a8cfbd50a28e226970737d5cd9d5fd62

    Affected versions

    v2.0.1
    v2.0.0
    v2.0.0-pr13
    v2.0.0-pr11
    v2.0.0-pr10
    v2.0.0-pr8
    v2.0.0-pr7
    v2.0.0-pr6
    v2.0.0-pr5
    v2.0.0-pr4
    v2.0.0-pr3
    v2.0.0-pr2
    v2.0.0-pr1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-2820 | CVE-DB