CVE-2021-37333: Insufficient Session Expiration

Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser...

PT-2021-21610

Name of the Vulnerable Software and Affected Versions Laravel Booking System Booking Core version 2.0 Description The issue concerns session management. When a password is changed at the "/user/profile/change-password" API endpoint, it does not invalidate a session opened in a different browser...