CVE-2023-4005

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-613

Affected software

VendorProductVersions
fossbillingfossbilling/fossbilling>= unspecified, < 0.5.5
fossbillingfossbilling< 0.5.5

References

Timeline

Published
Jul 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-400508.8Upload profile either through API or user interface in Chef Automate prior to and including version 4.10.29 using InSpec check command with CVE-2023-400519.9This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation rCVE-2023-400527.5This issue affects Progress Application Server (PAS) for OpenEdge in versions 11.7 prior to 11.7.18, 12.2 prior to 12.2.13, and innovation rCVE-2023-400535.0A vulnerability has been identified within Serv-U 15.4 that allows an authenticated actor to insert content on the file share function featuCVE-2023-400548.8The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows aCVE-2023-400558.8The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows aCVE-2023-400568.8SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged accoCVE-2023-400579.0The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability CVE-2023-400586.5Sensitive data was added to our public-facing knowledgebase that, if exploited, could be used to access components of Access Rights Manager CVE-2023-40069.8Improper Neutralization of Formula Elements in a CSV File in GitHub repository thorsten/phpmyfaq prior to 3.1.16.CVE-2023-400607.2A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factCVE-2023-400618.8Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result.
CVE-2023-4005: Critical severity, CVSS 9.8 | Vulnix