VULNERABILITY INTELLIGENCE

CVE-2024-29401

CVSS score9.8 CRITICAL

EPSS probability0.78%

CISA KEVNot currently listed

Published2024-03-26

Last modified2026-06-17

Description

xzs-mysql 3.8 is vulnerable to Insufficient Session Expiration, which allows attackers to use the session of a deleted admin to do anything.