Threats tagged 'ghsa-c89q-h7hg-5gxf'

A security flaw exists in Stirling-Tools Stirling-PDF versions up to 3.3.0 in the WorkflowParticipantController.getParticipantDetails function. The flaw causes an insufficient session timeout value, which can be exploited remotely. The vendor has not responded to disclosure attempts. The CVSS score is 5.3, indicating a medium severity vulnerability.