VULNERABILITY INTELLIGENCE

CVE-2023-40174

CVSS score6.8 MEDIUM

EPSS probability0.52%

CISA KEVNot currently listed

Published2023-08-18

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Description

Social media skeleton is an uncompleted/framework social media project implemented using a php, css ,javascript and html. Insufficient session expiration is a web application security vulnerability that occurs when a web application does not properly manage the lifecycle of a user's session. Social media skeleton releases prior to 1.0.5 did not properly limit manage user session lifecycles. This issue has been addressed in version 1.0.5 and users are advised to upgrade. There are no known workarounds for this vulnerability.

Weakness classification

CWE-613: Insufficient Session Expiration

Primary references

security-advisories@github.com — Patch
security-advisories@github.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory