← Back

CVE-2023-1788

nvd nist
Published: Apr 5, 2023Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.

Affected (5)

Firefly Iii
1 product
Firefly Iii
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Firefly Iii
Firefly Iii
Before 6.0.0
Firefly Iii
Version 6.0.0 alpha1
Firefly Iii
Version 6.0.0 alpha2
Firefly Iii
Version 6.0.0 beta1
Firefly Iii
Version 6.0.0 beta2

Related CWEs

CWE-613
Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."

References (4)

Source: security@huntr.dev
Patch
Source: security@huntr.dev
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required

Timeline

No history available yet.