CVE-2023-1788: Insufficient Session Expiration

April 5, 2023 (updated April 12, 2023)

Insufficient Session Expiration in GitHub repository firefly-iii/firefly-iii prior to 6.

References

github.com/advisories/GHSA-h7vv-46p5-prmh
github.com/firefly-iii/firefly-iii/commit/68f398f97cbe1870fc098d8460bf903b9c3fab30
huntr.dev/bounties/79323c9e-e0e5-48ef-bd19-d0b09587ccb2
nvd.nist.gov/vuln/detail/CVE-2023-1788

Detect and mitigate CVE-2023-1788 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →