CVE-2022-0991

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-613

Affected software

No affected versions have been published.

Timeline

Published
Mar 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-09929.8The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrCVE-2022-09939.8The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrCVE-2022-09944.8The Hummingbird WordPress plugin before 3.3.2 does not sanitise and escape the Config Name, which could allow high privilege users, such as CVE-2022-09957.8An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite pCVE-2022-09966.5A vulnerability was found in the 389 Directory Server that allows expired passwords to access the database to cause improper authentication.CVE-2022-09977.8Improper file permissions in the CommandPost, Collector, and Sensor components of Fidelis Network and Deception enables an attacker with locCVE-2022-09987.8An integer overflow flaw was found in the Linux kernel’s virtio device driver code in the way a user triggers the vhost_vdpa_config_validateCVE-2022-09998.8An authenticated user may be able to misuse parameters to inject arbitrary operating system commands into mySCADA myPRO versions 8.25.0 and CVE-2022-10009.8Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.CVE-2022-10014.8The WP Downgrade WordPress plugin before 1.2.3 only perform client side validation of its "WordPress Target Version" settings, but does not CVE-2022-10025.4Mattermost 6.3.0 and earlier fails to properly sanitize the HTML content in the email invitation sent to guest users, which allows registereCVE-2022-10034.9One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to
CVE-2022-0991: High severity, CVSS 7.1 | Vulnix