Skip to content
OpenAdvisories

Vendor

Arangodb

3 known vulnerabilities.

Products

arangodb 2 ArangoDB Community Edition 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2021-25940

    ArangoDB - Insufficient Session Expiration after Password Change

    In ArangoDB, versions v3.7.6 through v3.8.3 are vulnerable to Insufficient Session Expiration. When a user’s password is changed by the administrator, the session isn’t invalidated, allowing a malicious user to still be logged in and perform arbitrary actions…

    Arangodb arangodb