CVE-2020-23140

creationtimestamp| type| source ---|---|--- 2020-11-09 20:55:31+00:00| seen| https://t.me/cibsecurity/16040...

CVE-2020-23140

CVE-2020-23140 affects Microweber 1.1.18 with insufficient session expiration. According to the connected documents, when a user changes password (and email), the existing sessions on other browsers/devices do not expire and remain active, enabling potential reuse of valid sessions across devices...