CVE-2017-12965: APACHE2TRIAD

Critical severity, CVSS 9.8. EPSS: 15.7% chance of exploitation in the next 30 days.

Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter.

Affected products

• APACHE2TRIAD APACHE2TRIAD: version 1.5.4 only

Published 2017-08-23. Last modified 2026-06-17.