~ / search / GHSA-mf79-f657-47ww

GHSA-mf79-f657-47ww

Insufficient Session Expiration in Admidio

Source: GitHub Advisory Database (reviewed) High CVE-2022-0991

Packages

EcosystemPackageAffectedFixed in
Packagist admidio/admidio < 4.1.9 4.1.9

Details

As written in the advisory (Markdown source, shown as plain text).

Admidio prior to version 4.1.9 is vulnerable to insufficient session expiration. In vulnerable versions, changing the password in one session does not terminate sessions logged in with the old password, which could lead to unauthorized actors maintaining access to an account.

References

External links from the advisory. They lead to third-party sites.