Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37249
HistorySep 23, 2022 - 8:33 a.m.

Insufficient Session Expiration

2022-09-2308:33:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
octoprint security vulnerability sessionexpiration software

EPSS

0

Percentile

12.8%

octoprint is vulnerable to insecure insufficient session expiration. The vulnerability exists because the session expiration is not properly handled in find_user function in users.py which allows an attacker to use old session credentials or session IDs for authorization.

EPSS

0

Percentile

12.8%

Related for VERACODE:37249