← All advisories

High severity7.5NVD Advisory· Published Jul 5, 2022· Updated Jun 17, 2026

CVE-2022-2306

CVE-2022-2306

Description

Old session tokens can be used to authenticate to the application and send authenticated requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/heroiclabs/nakamaGo	<= 3.12.0	—

Affected products

3

Heroiclabs/Heroiclabs/nakamav5
Range: unspecified
ghsa-coords
pkg:golang/github.com/heroiclabs/nakama
Range: <= 3.12.0
Heroiclabs/Nakama
cpe:2.3:a:heroiclabs:nakama:*:*:*:*:*:*:*:*
Range: <3.13.0

Patches

Vulnerability mechanics

References

4

github.com/heroiclabs/nakama/commit/ce8d3921e2acd44ef8b5e6edfe595b6df067b166nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/35acf263-6db4-4310-ab27-4c3c3a53f796nvdExploitIssue TrackingPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-xv59-gc3r-rf92ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-2306ghsaADVISORY

News mentions

0

No linked articles in our index yet.