CVE-2023-49804

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...

CVE-2023-49804

creationtimestamp| type| source ---|---|--- 2024-01-01 15:06:55+00:00| seen| https://t.me/ctinow/161323...

CVE-2023-49804

Summary: CVE-2023-49804 affects Uptime Kuma and precedes version 1.23.9. When a user changes their login password, a previously logged-in user remains authenticated and can access the platform, an issue that persists across system/browser restarts. This vulnerability can expose sensitive data due...