CVE-2026-129173

MEDIUM 5.3

Stirling-Tools Stirling-PDF Participant Details Endpoint WorkflowParticipantController.java session timeout

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.0. Affected is the function WorkflowParticipantController.getParticipantDetails of the file app/proprietary/src/main/java/stirling/software/proprietary/workflow/controller/WorkflowParticipantController.java of the component Participant Details Endpoint. Performing a manipulation results in insufficient session timeout value. Remote exploitation of the attack is possible. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-1463 CWE-1462
Vendor	stirling-tools
Product	stirling-pdf
Published	Nov 13, 2026
Last Updated	Nov 14, 2026

Stay Ahead of the Next One

Get instant alerts for stirling-tools stirling-pdf

Be the first to know when new medium vulnerabilities affecting stirling-tools stirling-pdf are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:X/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Stirling-Tools / Stirling-PDF

3.0 3.1 3.2 3.3.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/437206 vuldb.com: https://vuldb.com/vuln/437206/cti vuldb.com: https://vuldb.com/cve/CVE-2026-129173 vuldb.com: https://vuldb.com/submit/1042368

Credits

Vu Hoang Dat (VNU Information Technology Institute, Vietnam National University, Hanoi) Le Quang Minh (VNU Information Technology Institute, Vietnam National University, Hanoi) 🔍 Vu Hoang Dat (VulDB User) Vu Hoang Dat (VulDB User) VulDB CNA Team