PT-1999-1080 · Dpec · Dpec Online Courseware

Name of the Vulnerable Software and Affected Versions: DPEC Online Courseware affected versions not specified Description: The issue allows an attacker to change another user's password without knowing the original password. Recommendations: At the moment, there is no information about a newer...

Existing sessions are not correctly invalidated when a user changes their password

More info at https://contao.org/en/news/security-vulnerability-cve-2019-10641.html...