CVE-2023-1854

CWE-613 — Insufficient Session Expiration3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.4%

top 36.98%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Online Graduate Tracer System Online Graduate Tracer System Project Online Graduate Tracer System

Timeline

PublishedApr 5

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/. The manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-224994 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitability: 1.2 | Impact: 3.4

Affected Packages2 packages

▶CVEListV5sourcecodester/online_graduate_tracer_system1.0

▶NVDonline_graduate_tracer_system_project/online_graduate_tracer_system1.0

🔴Vulnerability Details

GHSA

GHSA-6wr7-fwxp-gg3v: A vulnerability, which was classified as problematic, was found in SourceCodester Online Graduate Tracer System 1↗2023-04-05

▶

CVEList

SourceCodester Online Graduate Tracer System session expiration↗2023-04-05

▶