CVE-2024-35220

🗓️ 21 May 2024 21:08:15Reported by [email protected]Type

@fastify/session plugin vulnerability patched in 10.8.

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 8
Veracode	Insufficient Session Expiration	24 May 202405:24	–	veracode
OSV	GHSA-PJ27-2XVP-4QXG @fastify/session reuses destroyed session cookie	21 May 202418:09	–	osv
OSV	CVE-2024-35220	21 May 202421:15	–	osv
Cvelist	CVE-2024-35220 @fastify/session reuses destroyed session cookie	21 May 202420:26	–	cvelist
Vulnrichment	CVE-2024-35220 @fastify/session reuses destroyed session cookie	21 May 202420:26	–	vulnrichment
RedhatCVE	CVE-2024-35220	4 Feb 202522:12	–	redhatcve
CVE	CVE-2024-35220	21 May 202421:15	–	cve
Github Security Blog	@fastify/session reuses destroyed session cookie	21 May 202418:09	–	github

Source	Link
github	www.github.com/fastify/session/commit/0495ce5b534c4550f25228821db8098293439f2f
github	www.github.com/fastify/session/issues/251
github	www.github.com/fastify/session/security/advisories/GHSA-pj27-2xvp-4qxg

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 May 2024 21:15Current

7.4High risk

Vulners AI Score7.4

CVSS37.4

EPSS0.00154

CWE-613