medium4.3
CVE-2024-29402
cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity.
Impact
cskefu v7 suffers from Insufficient Session Expiration, which allows attackers to exploit the old session for malicious activity.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
- https://github.com/cskefu/cskefu/issues/781
- https://github.com/cskefu/cskefu/pull/803
- https://gist.github.com/menghaining/8d424faebfe869c80eadaea12bbdd158
- https://github.com/cskefu/cskefu/issues/781
- https://github.com/cskefu/cskefu/pull/803