Skip to content
OpenAdvisories

Weakness (CWE)

CWE-613: DEPRECATED: Insufficient Session Expiration

Base Deprecated Mapping prohibited

This entry has been deprecated because it was insufficiently clear. Consider CWE-1462 and its descendants.

Source: MITRE CWE-613

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-46455 Public exploit

    Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired tokens to be accepted

    Insufficient Session Expiration vulnerability in Apache Camel Keycloak Component. The camel-keycloak security helper KeycloakSecurityHelper.parseAndVerifyAccessToken builds a Keycloak TokenVerifier using withChecks(...) with only the subject-exists check and …

    Apache Software Foundation Apache Camel org.apache.camel:camel-keycloak Maven
  • Critical 9.1
    CVE-2025-56643 Public exploit

    Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out. As a result, pr…