GitHub Advisoryadvisory · Packagist
GHSA-7v3x-h7r2-34jv Insufficient Session Expiration in Pterodactyl API
MEDIUM
Official page ↗
- Ecosystem
- Packagist
- Packages
- pterodactyl/panel
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L
- Weaknesses
- CWE-613
- Reviewed
- 2022-01-20
Affected packages
• Packagist pterodactyl/panel: < 1.7.0 → fixed in 1.7.0
Description
Impact
A vulnerability exists in Pterodactyl Panel `authenticateApiKey($request->bearerToken(), $keyType);
• $this->auth->guard()->loginUsingId($model->user_id);
+ $this->auth->guard()->onceUsingId($model->user_id);
}
```
For more information
If you have any questions or comments about this advisory please reach out to `Tactical Fish#8008` on Discord or email `[email protected]`.