CVE-2023-40174
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
CVE-2023-40174 affects the Social media skeleton project, which improperly manages the user session lifecycle. Versions prior to 1.0.5 did not adequately limit session duration, posing a risk of unauthorized access.
Risk Assessment
Improper session management can lead to user account takeover, jeopardizing data security and the organization's reputation.
Recommendation
It is recommended to upgrade to version 1.0.5 or later to mitigate this vulnerability. There are no known workarounds for this issue.
Original NVD description (English source)
Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability.