CVE Catalog

CVE-2023-4126

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.48%

37th percentile - higher than 37% of all known CVEs

Summary

Insufficient session expiration exists in the GitHub repository answerdev/answer prior to version 1.1.0, which may lead to unauthorized access.

Risk Assessment

The organization may be at risk of session hijacking, potentially resulting in unauthorized access to data.

Recommendation

It is recommended to upgrade to version 1.1.0 or later to ensure proper session expiration.

Other vulnerabilities in GitHub repository answerdev/answer

See all
Original NVD description (English source)

Insufficient Session Expiration in GitHub repository answerdev/answer prior to v1.1.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS