CVE-2023-5865

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Insufficient Session Expiration in GitHub repository thorsten/phpmyfaq prior to 3.2.2.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-613

Affected software

No affected versions have been published.

Timeline

Published
Oct 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-58665.7Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository thorsten/phpmyfaq prior to 3.2.1.CVE-2023-58675.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.2.2.CVE-2023-58684.3A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggCVE-2023-58698.8A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQLCVE-2023-58704.4A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcCVE-2023-58715.3A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a CVE-2023-58724.3In Wago Smart Designer in versions up to 2.33.1 a low privileged remote attacker may enumerate projects and usernames through iterative requCVE-2023-58735.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.CVE-2023-58744.8The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such aCVE-2023-58755.3Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitatioCVE-2023-58765.3Mattermost fails to properly validate a RegExp built off the server URL path, allowing an attacker in control of an enrolled server to mountCVE-2023-58779.8The affiliate-toolkit WordPress plugin before 3.4.3 lacks authorization and authentication for requests to it's affiliate-toolkit-starter/to
CVE-2023-5865: Critical severity, CVSS 9.8 | Vulnix