Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Lujiefsio

#28123of 53,624
9Total CVSS
Vulnerabilities · 2
Medium
2
PT-2024-22883
4.3
2024-04-16
Cskefu · Cskefu · CVE-2024-29402
**Name of the Vulnerable Software and Affected Versions** cskefu version 7 **Description** The issue is related to Insufficient Session Expiration, which allows attackers to exploit old sessions for malicious activity. **Recommendations** For cskefu version 7, consider implementing proper session expiration mechanisms to prevent the exploitation of old sessions. As a temporary workaround, restrict access to sensitive areas of the application that rely on session-based authentication until a proper fix is applied.
PT-2024-24200
4.7
2024-04-16
Unknown · Gin-Vue-Admin · CVE-2024-31760
**Name of the Vulnerable Software and Affected Versions** sanluan flipped-aurora gin-vue-admin versions 2.4.x **Description** An issue in the Session Expiration component allows an attacker to escalate privileges. **Recommendations** For versions 2.4.x, consider restricting access to the Session Expiration component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.