← back
CVE-2022-2306

Insufficient Session Expiration in heroiclabs/nakama

CVSS 8.2 HIGHEPSS 0.7%CWE-613
Old session tokens can be used to authenticate to the application and send authenticated requests.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →