CVE-2021-37333

2021-10-0413:39:03

mitre

www.cve.org

9.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.1%

JSON

Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser.

References

www.navidkagalwalla.com/booking-core-vulnerabilities