CVE-2024-31221

MEDIUM Year: 2024
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-384
View all →

Vulnerability Description

Sunshine is a self-hosted game stream host for Moonlight. Starting in version 0.10.0 and prior to version 0.23.0, after unpairing all devices in the web UI interface and then pairing only one device, all of the previously devices will be temporarily paired. Version 0.23.0 contains a patch for the issue. As a workaround, restarting Sunshine after unpairing all devices prevents the vulnerability.

Related Vulnerabilities

CVE-2017-10600

MEDIUM
CVSS:5.9(Medium)

ubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting image with the uid of the invoking user. When the resulting image is booted, a local attacker with the same...

CWE-3842017

CVE-2017-5831

MEDIUM
CVSS:5.9(Medium)

Session fixation vulnerability in the forgot password mechanism in Revive Adserver before 4.0.1, when setting a new password, allows remote attackers to hijack web sessions via the session ID.

CWE-3842017

CVE-2018-1000173

MEDIUM
CVSS:5.9(Medium)

A session fixaction vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows unauthorized attackers to impersonate another user if they can contr...

CWE-3842018

CVE-2018-1000602

MEDIUM
CVSS:5.9(Medium)

A session fixation vulnerability exists in Jenkins SAML Plugin 1.0.6 and earlier in SamlSecurityRealm.java that allows unauthorized attackers to impersonate another users if they can control the pre-a...

CWE-3842018

CVE-2018-19443

MEDIUM
CVSS:5.9(Medium)

The client in Tryton 5.x before 5.0.1 tries to make a connection to the bus in cleartext instead of encrypted under certain circumstances in bus.py and jsonrpc.py. This connection attempt fails, but i...

CWE-3842018

CVE-2019-1003019

MEDIUM
CVSS:5.9(Medium)

An session fixation vulnerability exists in Jenkins GitHub Authentication Plugin 0.29 and earlier in GithubSecurityRealm.java that allows unauthorized attackers to impersonate another user if they can...

CWE-3842019