CVE-2023-4005: Fossbilling

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Insufficient Session Expiration in GitHub repository fossbilling/fossbilling prior to 0.5.5.

Affected products

• Fossbilling Fossbilling: before 0.5.5 (fixed in 0.5.5)

Published 2023-07-31. Last modified 2026-06-17.