id: GO-2024-2959
modules:
    - module: github.com/gofiber/fiber
      vulnerable_at: 1.14.6
    - module: github.com/gofiber/fiber/v2
      versions:
        - fixed: 2.52.5
      vulnerable_at: 2.52.4
      packages:
        - package: github.com/gofiber/fiber/v2/middleware/session
          symbols:
            - Store.Get
            - Store.responseCookies
summary: Session Middleware Token Injection Vulnerability in github.com/gofiber/fiber
cves:
    - CVE-2024-38513
ghsas:
    - GHSA-98j2-3j3p-fw2v
references:
    - advisory: https://github.com/gofiber/fiber/security/advisories/GHSA-98j2-3j3p-fw2v
    - fix: https://github.com/gofiber/fiber/commit/7926e5bf4da03e54f62d27d53229d35b264cba8e
source:
    id: GHSA-98j2-3j3p-fw2v
    created: 2024-07-02T11:03:15.390979-04:00
review_status: REVIEWED