CVE-2024-55603

creationtimestamp| type| source ---|---|--- 2024-12-18 23:57:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113676532984953254 2024-12-19 02:15:15+00:00| seen| https://t.me/cvedetector/13286 2025-09-15 13:28:32+00:00| seen| MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f 2025-09-16...

CVE-2024-55603 Insufficient session invalidation in Kanboard

Kanboard is project management software that focuses on the Kanban methodology. In affected versions sessions are still usable even though their lifetime has exceeded. Kanboard implements a cutom session handler app/Core/Session/SessionHandler.php, to store the session data in a database...

CVE-2024-55603

CVE-2024-55603 affects Kanboard. Affected versions allow sessions to remain valid after expiry because the custom session handler queries the sessions table without properly validating the expires_at lifetime, enabling a login for expired sessions. The SessionHandlerInterface::gc cleanup runs onl...