CVE-2020-35358

    Dashboard / Vulnerabilities / CVE-2020-35358

    CVE-2020-35358

    Published: 15 Mar 2021Last Modified: 8 Jul 2026

    Summary:

    Details: DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or functionality.

    References: https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- fb2ce5a11c3fe251a69a3b17dd36ac4defa5dd0c
    Fixed -None

    Affected versions

    4.15.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-35358 | CVE-DB