CVE-2018-21018

Critical

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

mitre·CWE-613·Published 2019-09-22

CVSS

9.8

EPSS

0.03

KEV

Exploits

cve.orgen

79 chars

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

NVDen

79 chars

Mastodon before 2.6.3 mishandles timeouts of incompletely established sessions.

NVDes

131 chars

Mastodon versiones anteriores a 2.6.3, maneja inapropiadamente los tiempos de espera de sesiones establecidas de manera incompleta.

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H