CVE-2023-4190: Insufficient Session Expiration in admidio/admidio
Published Aug 6, 2023
·Updated
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.
Affected Software
2 affected componentsFixes available
composer/admidio/admidio<4.2.11
4.2.11
Admidio Admidio<4.2.11
Remediation
Event History
Aug 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
01:15 AM
DescriptionWeakness
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
03:30 AM
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2023-4190.
2
What is the title of this vulnerability?
The title of this vulnerability is Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.
3
What is the severity of CVE-2023-4190?
The severity of CVE-2023-4190 is medium with a CVSS score of 6.5.
4
What is the affected software?
The affected software is admidio/admidio prior to version 4.2.11.
5
How can this vulnerability be exploited?
This vulnerability allows a user's session to remain valid even after logging out, potentially granting unauthorized access to sensitive areas and functionalities.