A weakness in the Global Session Handler of CloudClassroom-PHP-Project allows an attacker to manipulate session data, causing sessions to expire unexpectedly. This results in authenticated users being logged out, effectively denying access to legitimate users. The vulnerability is classified as CWE-613, indicating improper publication of session data or lack of proper validation of session cookies.

The affected product is CloudClassroom‑PHP‑Project from vendor mathurvishal. No specific version numbers are disclosed because the project follows a rolling‑release model. Therefore, any instance using the indicated product class is potentially vulnerable.

The CVSS score of 6.3 indicates moderate severity. Exploitation is possible remotely and requires high complexity, but the exploit is publicly available, so attackers could attempt it. The EPSS metric is not available and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited widespread malicious exploitation yet. Nonetheless, an affected administrator should treat this as a tangible risk of denial of service to legitimate users.