by Kastro
Paper/Archive/CVE-2021-25981

CVE-2021-25981

debiki talkyard — Talkyard - Insufficient Session Expiration

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 85.0.850 × 2017.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to gain admin privileges, given the attacker is able to obtain that token (via other, hypothetical attacks)

Affected

ProductAffectedFixed inSource
talkyardv0.2021.20 – < unspecifiedunspecifiedCNA
talkyardunspecified – v0.2021.34–CNA

Scores by source

Mend (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgithub.com/debiki/talkyard/commit/b0310df019887f3464895529c773bc7d85ddcf34refgithub.com/debiki/talkyard/commit/b0712915d8a22a20b09a129924e8a29c25ae5761refwhitesourcesoftware.com/vulnerability-database/CVE-2021-25981