« Volver al listado

CVE-2025-24973

Estado: AplazadaCrítica (9.3)—

Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of the logout process, authentication credentials remain in cookies even after a user has explicitly logged out, which may allow an attacker to steal authentication tokens. This could have devastating consequences if a user with admin privileges is (or was) using a shared device. Users who have logged in on a shared device should go to Settings > Security and regenerate their login tokens. Version 12.25Q1.1 fixes the issue. As a workaround, clear cookies and site data in the browser after logging out.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:L sin UI requiere T1068, pero el texto enfatiza robo de tokens en dispositivos compartidos tras logout impropio, implicando acceso a credenciales de autenticación (T1078.001) y potencial suplantación de cuenta admin (T1098.001).

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

User Account ManagementThreat Intelligence ProgramPrivileged Account ManagementNetwork SegmentationMulti-factor AuthenticationExecution Prevention

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Concorde — ConcordeAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-24973",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-24973",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-11T16:11:36.043904Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 9.3,
          "attackVector": "LOCAL",
          "baseSeverity": "CRITICAL",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2.5
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "nexryai",
          "product": "concorde",
          "versions": [
            {
              "status": "affected",
              "version": "< 12.25Q1.1"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-02-11T16:15:52.020",
  "references": [
    {
      "url": "https://github.com/nexryai/concorde/commit/1f6ac9b289906083b132e4f9667a31a60ef83e4e",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/nexryai/concorde/security/advisories/GHSA-2369-p2wh-7cc2",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-613"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Concorde, formerly know as Nexkey, is a fork of the federated microblogging platform Misskey. Prior to version 12.25Q1.1, due to an improper implementation of the logout process, authentication credentials remain in cookies even after a user has explicitly logged out, which may allow an attacker to steal authentication tokens. This could have devastating consequences if a user with admin privileges is (or was) using a shared device. Users who have logged in on a shared device should go to Settings > Security and regenerate their login tokens. Version 12.25Q1.1 fixes the issue. As a workaround, clear cookies and site data in the browser after logging out."
    },
    {
      "lang": "es",
      "value": "Concorde, anteriormente conocida como Nexkey, es una bifurcación de la plataforma de microblogging federada Misskey. Antes de la versión 12.25Q1.1, debido a una implementación incorrecta del proceso de cierre de sesión, las credenciales de autenticación permanecían en las cookies incluso después de que un usuario cerrara sesión explícitamente, lo que podía permitir a un atacante robar tokens de autenticación. Esto podría tener consecuencias devastadoras si un usuario con privilegios de administrador está (o estaba) usando un dispositivo compartido. Los usuarios que hayan iniciado sesión en un dispositivo compartido deben ir a Configuración &gt; Seguridad y regenerar sus tokens de inicio de sesión. La versión 12.25Q1.1 soluciona el problema. Como workaround, borre las cookies y los datos del sitio en el navegador después de cerrar sesión. "
    }
  ],
  "lastModified": "2026-06-17T08:59:54.557",
  "sourceIdentifier": "security-advisories@github.com"
}