CVE-2022-2713: Insufficient Session Expiration

August 9, 2022 (updated August 26, 2022)

Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0.

References

github.com/advisories/GHSA-vm6p-35rw-3fxc
github.com/cockpit-hq/cockpit/commit/dd8d0314912fa6517ebd2cc9939d9fafbe68731b
huntr.dev/bounties/3080fc96-75d7-4868-84de-9fc8c9b90290
nvd.nist.gov/vuln/detail/CVE-2022-2713

Detect and mitigate CVE-2022-2713 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →