GHSA-qq8m-9rpx-w2fm

    Dashboard / Vulnerabilities / GHSA-qq8m-9rpx-w2fm

    GHSA-qq8m-9rpx-w2fm

    Published: 6 Aug 2023Last Modified: 16 Feb 2024
    Aliases:
    CVE-2023-4190

    Summary: Admidio Insufficient Session Expiration vulnerability

    Details: Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11. This vulnerability allows a user's session to remain valid even after the user has logged out, potentially granting unauthorized access to sensitive areas and functionalities.

    References: https://nvd.nist.gov/vuln/detail/CVE-2023-4190, https://github.com/admidio/admidio/commit/391fb2af5bee641837a58e7dd66ff76eac92bb74, https://github.com/admidio/admidio, https://huntr.dev/bounties/71bc75d2-320c-4332-ad11-9de535a06d92

    Affected packages

    Package

    Name: admidio/admidio

    Purl: pkg:composer/admidio/admidio

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.2.11

    Affected versions

    4.1.0
    4.1.3

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    GHSA-qq8m-9rpx-w2fm | CVE-DB