CVE-2020-35358

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-35358
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35358.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-35358
Published
2021-03-15T12:15:12.523Z
Modified
2026-07-08T20:28:55.206768Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or functionality.

References

Affected packages

Git / github.com/domainmod/domainmod

Affected ranges

Type
GIT
Repo
https://github.com/domainmod/domainmod
Events
Introduced
fb2ce5a11c3fe251a69a3b17dd36ac4defa5dd0c
Last affected
fb2ce5a11c3fe251a69a3b17dd36ac4defa5dd0c
Database specific 
{
    "cpe": "cpe:2.3:a:domainmod:domainmod:4.15.0:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "4.15.0"
        },
        {
            "last_affected": "4.15.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

4.*
4.15.0
v4.*
v4.15.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-35358.json"