1. Home
  2. CVE Database
  3. CVE-2023-40174
MEDIUM · 6.8

CVE-2023-40174

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability th...

Vulnerability Description

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
FobybusSocial-Media-Skeleton< 1.0.5

Related Weaknesses (CWE)

CWE-613

References

FAQ

What is CVE-2023-40174?

CVE-2023-40174 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability th...

How severe is CVE-2023-40174?

CVE-2023-40174 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-40174?

Check the references section above for vendor advisories and patch information. Affected products include: Fobybus Social-Media-Skeleton.