Vulnerability	Vulnerable Version
M Insufficient Session Expiration Affected versions of this package are vulnerable to Insufficient Session Expiration in the session recreation process. An attacker can gain unauthorized access to a user's account by replaying a previously valid session cookie after logout or session renewal. This is only exploitable if the attacker has obtained a stale session cookie associated with the victim. How to fix Insufficient Session Expiration? Upgrade `hydrooj` to version 5.0.2 or higher.	>=4.10.4 <5.0.2

Insufficient Session Expiration

Affected versions of this package are vulnerable to Insufficient Session Expiration in the session recreation process. An attacker can gain unauthorized access to a user's account by replaying a previously valid session cookie after logout or session renewal. This is only exploitable if the attacker has obtained a stale session cookie associated with the victim.

How to fix Insufficient Session Expiration?

Upgrade hydrooj to version 5.0.2 or higher.

>=4.10.4 <5.0.2

Go back to all versions of this package