جزئیات آسیب‌پذیری
CVE-2026-120340
mathurvishal CloudClassroom-PHP-Project Global Session session expiration
خلاصه‌ی فارسی
خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.
شرح رسمی (انگلیسی)
A weakness has been identified in mathurvishal CloudClassroom-PHP-Project. This issue affects some unknown processing of the component Global Session Handler. Executing a manipulation can lead to session expiration. The attack may be launched remotely. A high complexity level is associated with this attack. The exploitability is assessed as difficult. The exploit has been made available to the public and could be used for attacks. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. The vendor was contacted early about this disclosure but did not respond in any way.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 6.3متوسط | 4.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P |
| 3.7پایین | 3.1 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C |
| 3.7پایین | 3.0 | CVEProject cvelistV5 (CNA) (VulDB) | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C |
| 2.6پایین | 2.0 | CVEProject cvelistV5 (CNA) (VulDB) | AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:C |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| mathurvishal | CloudClassroom-PHP-Project | 5dadec098bfbbf3300d60c3494db3fb95b66e7be | CVEProject cvelistV5 (CNA) |
| mathurvishal | CloudClassroom-PHP-Project | c46ce5736007d9d6e51a8feeb9250729fe85f139 | CVEProject cvelistV5 (CNA) |
| mathurvishal | CloudClassroom-PHP-Project | dae0c5961a35a4faf28cde9e02117538f09f81c1 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۵- https://vuldb.com/vuln/429665 vdb-entry
- https://vuldb.com/vuln/429665/cti signaturepermissions-required
- https://vuldb.com/cve/CVE-2026-120340 third-party-advisory
- https://vuldb.com/submit/1016327 third-party-advisory
- https://github.com/vinniboy021-blip/Advisory/blob/main/session-cookie-logout.md exploit
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۸/۱۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۸/۱۱
- وضعیت
- PUBLISHED
- صادرکننده (CNA)
- VulDB
- اولویت کلون
- به‌زودی
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- Automatable
- no
- Exploitation
- none
- Technical Impact
- partial
ضعف‌ها (CWE)
- CWE-613Session Expiration