Cyber Posture

CVE-2013-10075

Critical

Published: 08 May 2026

Published
08 May 2026
Modified
08 May 2026
KEV Added
—
Patch
—
CVSS Score 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score 0.0001 1.4th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2013-10075 is a critical-severity Operation on a Resource after Expiration or Release (CWE-672) vulnerability in Chorny Apache\. Its CVSS base score is 9.1 (Critical).

Operationally, ranked at the 1.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

NVD Description

Apache::Session versions through 1.94 for Perl re-creates deleted sessions. The session stores Apache::Session::Store::File and Apache::Session::Store::DB_File will create a session that does not exist. This can lead to sessions being revived, potentially with data that was to be deleted.

Deeper analysisAI

Automated synthesis unavailable for this CVE.

Details

CWE(s)
CWE-672

Affected Products

chorny
apache\
\

CVEs Like This One

CVE-2025-40931Same product: Chorny Apache\
CVE-2026-43585Shared CWE-672
CVE-2024-47571Shared CWE-672
CVE-2025-69415Shared CWE-672
CVE-2024-57929Shared CWE-672
CVE-2026-30978Shared CWE-672

References