CVE-2022-2306CWE-613

Insufficient Session Expiration in heroiclabs/nakama

High · published July 5, 2022

CVSS v3.0
8.2
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

Old session tokens can be used to authenticate to the application and send authenticated requests.

The record
Technical detail
CVSS v3.0
8.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00881 · 58.7th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2022-07-05T08:30Z
EPSS history
Timeline
  • 05 JUL 08:30Z
    Insufficient Session Expiration in heroiclabs/nakama
    cvelistv5