From 8c9d74aa8de635d64cb1666544bd438c065e61b8 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 9 Jun 2025 17:50:49 +0000
Subject: [PATCH] Publish GHSA-jm72-67rm-763j

---
 .../2022/04/GHSA-jm72-67rm-763j/GHSA-jm72-67rm-763j.json      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/advisories/github-reviewed/2022/04/GHSA-jm72-67rm-763j/GHSA-jm72-67rm-763j.json b/advisories/github-reviewed/2022/04/GHSA-jm72-67rm-763j/GHSA-jm72-67rm-763j.json
index 0b4b2f7fed4..a6b839642d1 100644
--- a/advisories/github-reviewed/2022/04/GHSA-jm72-67rm-763j/GHSA-jm72-67rm-763j.json
+++ b/advisories/github-reviewed/2022/04/GHSA-jm72-67rm-763j/GHSA-jm72-67rm-763j.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jm72-67rm-763j",
-  "modified": "2025-05-28T23:02:25Z",
+  "modified": "2025-06-09T17:48:33Z",
   "published": "2022-04-21T01:54:03Z",
   "aliases": [
     "CVE-2009-20001"
   ],
-  "summary": "MantisBT Insufficient Session Experation allows for credential theft",
+  "summary": "MantisBT Insufficient Session Expiration cookie string not reset after logout",
   "details": "An issue was discovered in MantisBT before 2.24.5. It associates a unique cookie string with each user. This string is not reset upon logout (i.e., the user session is still considered valid and active), allowing an attacker who somehow gained access to a user's cookie to login as them.",
   "severity": [
     {