I\'m working on open-source application \"Project-Open\" and during the scanning I got the following vulnerability:
[Medium] Session Identifier Not Updated Issue
There is a fix in OpenACS 5.9 that addresses your scanning reports. Please see the following discussion on OpenACS.org for reference.
http://www.openacs.org/forums/message-view?message_id=5332821