GHSA-qq8m-9rpx-w2fm

ghsaUSosv

Admidio Insufficient Session Expiration vulnerability

view advisory published 2023-08-06Licence: CC-BY-4.0

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11. This vulnerability allows a user's session to remain valid even after the user has logged out, potentially granting unauthorized access to sensitive areas and functionalities.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-4190US	medium6.5	0.60% (49th)	—	2023-08-06
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.

references

External citations — patches, advisories, analysis.

https://github.com/admidio/admidioPACKAGE
https://github.com/admidio/admidio/commit/391fb2af5bee641837a58e7dd66ff76eac92bb74WEB
https://huntr.dev/bounties/71bc75d2-320c-4332-ad11-9de535a06d92WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-4190ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan