CVE-2023-4190
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
Insufficient session expiration in the GitHub repository admidio/admidio prior to version 4.2.11 may lead to unauthorized access.
Risk Assessment
Organizations may be at risk of unauthorized users gaining access to active sessions, potentially leading to data leakage.
Recommendation
It is recommended to upgrade to version 4.2.11 or later to ensure proper session expiration.
Other vulnerabilities in admidio/admidio
See all- CVE-2023-3692High
In the GitHub repository admidio/admidio prior to version 4.2.10, there is a vulnerability allowing unrestricted upload of files with dangerous types.
- CVE-2023-3303Low
Improper access control exists in the GitHub repository admidio/admidio prior to version 4.2.9.
- CVE-2023-3302High
In the GitHub repository admidio/admidio prior to version 4.2.9, there is improper neutralization of formula elements in a CSV file.
Original NVD description (English source)
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS