CVE-2023-5889: Insufficient Session Expiration in pkp/pkp-lib
Published Nov 1, 2023
·Updated
Insufficient Session Expiration in GitHub repository pkp/pkp-lib prior to 3.3.0-16.
Affected Software
1 affected component
pkp Pkp Web Application Library<3.3.0-16
Remediation
Event History
Nov 1, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-5889?
CVE-2023-5889 is a vulnerability that exists in the GitHub repository pkp/pkp-lib prior to version 3.3.0-16 and is related to insufficient session expiration.
2
What is the severity of CVE-2023-5889?
CVE-2023-5889 has a severity rating of 8.2, which is classified as high.
3
How does CVE-2023-5889 affect the Pkp Pkp Web Application Library?
CVE-2023-5889 affects the Pkp Pkp Web Application Library prior to version 3.3.0-16.
4
How can I fix the CVE-2023-5889 vulnerability?
To fix the CVE-2023-5889 vulnerability, it is recommended to update the pkp/pkp-lib GitHub repository to version 3.3.0-16 or later.
5
Where can I find more information about CVE-2023-5889?
More information about CVE-2023-5889 can be found at the following references: [reference_1], [reference_2].