Lucene search
GoogleOSV:CVE-2022-23063HistoryMay 03, 2022 - 9:15 a.m.
CVE-2022-23063
2022-05-0309:15:09
Google
osv.dev
6
shopizer
version 2.3.0
version 3.0.1
insufficient session expiration
password change
vulnerable software
In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Related
cvelist
cvelist
CVE-2022-23063 Shopizer - Insufficient Session Expiration
2022-05-03 08:55:09
prion
prion
Session fixation
2022-05-03 09:15:00
nvd
nvd
CVE-2022-23063
2022-05-03 09:15:09
veracode
veracode
Insufficient Session Expiration
2022-05-04 11:11:06
cve
cve
CVE-2022-23063
2022-05-03 09:15:09