CVE-2023-40174

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-40174
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-40174.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-40174
Aliases
  • GHSA-cr5c-ggwq-g4hq
Published
2023-08-18T21:41:53.666Z
Modified
2025-11-29T14:33:39.250239Z
Severity
  • 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
Insufficient Session Expiration in fobybus/social-media-skeleton
Details

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability.

Database specific 
{
    "cwe_ids": [
        "CWE-613"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40174.json"
}
References

Affected packages

Git / github.com/fobybus/social-media-skeleton

Affected ranges

Type
GIT
Repo
https://github.com/fobybus/social-media-skeleton
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ea5d199c05fa2a0c1fafbfca44734676d2d9d851

Affected versions

1.*

1.0.3
1.0.4

v1.*

v1.0.1
v1.0.2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-40174.json"