CVE-2025-51306

Опубликовано: 06 авг. 2025

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

In Gatling Enterprise versions below 1.25.0, a user logging-out can still use his session token to continue using the application without expiration, due to incorrect session management.

Ссылки

https://gatling.io/products
Product
https://github.com/Flo354/vulnerabilities/blob/main/gatling-enterprise/CVE-2025-51306-broken-logout.md
Exploit
https://github.com/Flo354/vulnerabilities/blob/main/gatling-enterprise/CVE-2025-51306-change-permissions-not-reflected.md
Exploit
https://github.com/Flo354/vulnerabilities/tree/main/gatling-enterprise
Exploit

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gatling:gatling:*:*:*:*:enterprise:*:*:*

Версия до 1.25.0 (исключая)

EPSS

Процентиль: 13%

0.00043

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-1259

Связанные уязвимости

GHSA-6gcg-cv7x-6hm2