Lucene search
+L

User session not correctly destroyed on logout

🗓️ 24 May 2023 09:45:55Reported by NextcloudType 
nextcloud
 nextcloud
🔗 github.com👁 92 Views

User session not correctly destroyed on logout. Regression in session handling between Nextcloud Server and Nextcloud Text app leads to continued previous session after successful authentication with another account

Related
Refs
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
Nextcloud Server Session Expiration
25 Jan 202400:00
–bdu_fstec
circl
Circl
CVE-2023-32318
26 May 202322:28
–circl
cnnvd
CNNVD
NextCloud code issues and vulnerabilities
26 May 202300:00
–cnnvd
cve
CVE
CVE-2023-32318
26 May 202317:21
–cve
cvelist
Cvelist
CVE-2023-32318 User session not correctly destroyed on logout
26 May 202317:21
–cvelist
euvd
EUVD
EUVD-2023-36565
3 Oct 202520:07
–euvd
mend
Mend
CVE-2023-32318
26 May 202317:21
–mend
nvd
NVD
CVE-2023-32318
26 May 202318:15
–nvd
openvas
OpenVAS
Nextcloud Server 25.0.2 < 25.0.6, 26.0.x < 26.0.1 Insufficient Session Expiration Vulnerability (GHSA-q8c4-chpj-6v38)
25 May 202300:00
–openvas
prion
Prion
Design/Logic Flaw
26 May 202318:15
–prion
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

24 May 2023 09:45Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.16.7 - 7.2
EPSS0.00209
SSVC
92