CVE-2014-125048

CVE-2014-125048 is a critical session fixation vulnerability found in the app/controllers/oauth.js file of kassi xingwall. This flaw, identified as CWE-384, allows an attacker to fixate a user's session, potentially leading to unauthorized access. The vulnerability has a CVSS v3.1 score of 5.4 (MEDIUM), indicating a network-based attack with low complexity, requiring user interaction, and resulting in low impact to confidentiality and integrity. While critical, its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are also absent, indicating a lack of widespread attention or exploitation.