Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
huntrHainguyen0207FBA2991A-1B8A-4C89-9689-D708526928E1
HistorySep 23, 2023 - 3:51 p.m.

Disabled accounts still work normally

2023-09-2315:51:54
hainguyen0207
www.huntr.dev
12
disabled accounts
security flaw
authentication bypass

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

JSON

Description

Disabled accounts still work normally

Proof of Concept

The account A is logged in and active. Admin suddenly disabled that account, but account A still works normally.

Video Poc

https://drive.google.com/file/d/15OHZF71pJyGaU30dQaw6NglkpZEhpOPm/view?usp=sharing

Related

osv 1
cve 1
nvd 1
prion 1
cvelist 1
osv
osv
CVE-2023-5889
2023-11-01 01:15:07
cve
cve
CVE-2023-5889
2023-11-01 01:15:07
nvd
nvd
CVE-2023-5889
2023-11-01 01:15:07
prion
prion
Session fixation
2023-11-01 01:15:00
cvelist
cvelist
CVE-2023-5889 Insufficient Session Expiration in pkp/pkp-lib
2023-11-01 00:00:18

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

36.1%

JSON
Related for FBA2991A-1B8A-4C89-9689-D708526928E1
osv1cve1nvd1prion1cvelist1