This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2024-5995 | BDVDB-2026-239762 Detail

Soar CloudHR Portal

Description#

The notification emails sent by Soar Cloud HR Portal contain a link with a embedded session. The expiration of the session is not properly configured, remaining valid for more than 7 days and can be reused.

Impact#

CAPEC-60 Reusing Session IDs (aka Session Replay)

Weaknesses#

  • CWE-613 Insufficient Session Expiration

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.