CVE-2023-31140

2023-05-0821:15:11

CWE-613

web.nvd.nist.gov

cve

2023

31140

openproject

2fa

session termination

security

software

workaround

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.4%

CPENameOperatorVersion
openproject:openprojectopenprojectlt12.5.4

CPE	Name	Operator	Version
openproject:openproject	openproject	lt	12.5.4

References

community.openproject.org/wp/48035

github.com/opf/openproject/pull/12508

github.com/opf/openproject/security/advisories/GHSA-xfp9-qqfj-x28q

www.openproject.org/docs/release-notes/12-5-4/