Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2024-25628

Insufficient Session Expiration in alf.io

Description

Alf.io is a free and open source event attendance management system. In versions prior to 2.0-M4-2402 users can access the admin area even after being invalidated/deleted. This issue has been addressed in version 2.0-M4-2402. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

alfio-event alf.io

  • < 2.0-M4-2402affected

References