Lucene search

K
osvGoogleOSV:CVE-2022-22113
HistoryJan 13, 2022 - 9:15 a.m.

CVE-2022-22113

2022-01-1309:15:07
Google
osv.dev
6
daybyday crm
insufficient session expiration
vulnerability
software

AI Score

7

Confidence

High

EPSS

0.001

Percentile

41.1%

In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.

AI Score

7

Confidence

High

EPSS

0.001

Percentile

41.1%

Related for OSV:CVE-2022-22113