CVE-2020-35358

CVE-2020-35358 describes an insufficient session expiration vulnerability in DomainMOD domainmod-v4.15.0. When a user changes their password, existing sessions on other browsers or devices remain active, allowing unauthorized access. This critical vulnerability has a CVSS score of 9.8, indicating a network-exploitable flaw with low attack complexity, requiring no user interaction, and leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, with 10 mentions, suggesting awareness and potential for future exploitation.