What’s Vulnerable › Vulnerabilities

CVE-2020-35358

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-03-15 · updated 2026-06-17
• Weakness: CWE-613

Description

DomainMOD domainmod-v4.15.0 is affected by an insufficient session expiration vulnerability. On changing a password, both sessions using the changed password and old sessions in any other browser or device do not expire and remain active. Such flaws frequently give attackers unauthorized access to some system data or functionality.

Affected products

• DomainMOD: 4.15.0

References

• https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7
• https://gist.github.com/anku-agar/0fec2ffd98308e550ce9b5d4b395d0d7

Get alerted when CVE-2020-35358 or the next vulnerability affects your stack