Skip to content
OpenAdvisories

Vendor

ifmeorg

5 known vulnerabilities.

Products

ifme 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-25992

    ifme - Insufficient Session Expiration

    In Ifme, versions 1.0.0 to v.7.33.2 don’t properly invalidate a user’s session even after the user initiated logout. It makes it possible for an attacker to reuse the admin cookies either via local/network access or by other hypothetical attacks.

    ifmeorg ifme