PT-2023-27306 · Unknown · Social Media Skeleton
Zodiac0704
·
Publicado
2023-08-18
·
Atualizado
2023-08-23
·
CVE-2023-40174
CVSS v3.1
6.8
Média
| Vetor | AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Social media skeleton versions prior to 1.0.5
Description
Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. This issue affects Social media skeleton, an uncompleted/framework social media project implemented using php, css, javascript, and html. The estimated number of potentially affected devices worldwide is not specified. There are no known real-world incidents where this issue was exploited.
Recommendations
For Social media skeleton versions prior to 1.0.5, upgrade to version 1.0.5 to address the issue. As a temporary workaround, consider implementing proper session management and expiration mechanisms until the official patch is applied. Restrict access to sensitive areas of the application to minimize the risk of exploitation. Avoid using persistent sessions or implement a session timeout to reduce the risk.
Exploit
Correção
Insufficient Session Expiration
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Social Media Skeleton