Insufficient Session Expiration

admidio/admidio is vulnerable to insecure session management. The vulnerability exists due to insufficient sanitization in session expiration in the refreshAutoLogin function in the Session.php file leading to user account compromise...

Insufficient Session Expiration in Admidio

Admidio prior to version 4.1.9 is vulnerable to insufficient session expiration. In vulnerable versions, changing the password in one session does not terminate sessions logged in with the old password, which could lead to unauthorized actors maintaining access to an account...

GHSA-MF79-F657-47WW Insufficient Session Expiration in Admidio

Admidio prior to version 4.1.9 is vulnerable to insufficient session expiration. In vulnerable versions, changing the password in one session does not terminate sessions logged in with the old password, which could lead to unauthorized actors maintaining access to an account...

CVE-2022-0991

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

CVE-2022-0991

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

Session fixation

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

CVE-2022-0991 Insufficient Session Expiration in admidio/admidio

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

CVE-2022-0991

CVE-2022-0991 affects admidio/admidio prior to 4.1.9 due to insufficient session expiration. The root cause is that changing a password in one session may not terminate other active sessions, potentially allowing continued access. Documented impact includes risk to account security; mitigation is...

CVE-2022-0991

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

CVE-2022-0991 Insufficient Session Expiration in admidio/admidio

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

PT-2022-13576

Name of the Vulnerable Software and Affected Versions admidio versions prior to 4.1.9 Description The issue concerns insufficient session expiration. When a user changes their password in one session, sessions logged in with the old password are not terminated, potentially allowing unauthorized...

Admidio 代码问题漏洞

Admidio is an open source member management system from the Admidio team. The system supports member lists, event management, guestbooks, photo albums, and downloads. A security vulnerability exists in Admidio before 4.1.9, which stems from insufficient session expiration...

CVE-2022-0991: Insufficient Session Expiration

Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9...

Insufficient Session Expiration in Sylius

Impact The reset password token was not set to null after the password was changed. This is causing behaviour in which the same token can be used several times, so it can result in a leak of the existing token and an unauthorised password change. Patches The issue is fixed in versions: 1.10.11,...

GHSA-MF3V-F2QQ-PF9G Insufficient Session Expiration in Sylius

Impact The reset password token was not set to null after the password was changed. This is causing behaviour in which the same token can be used several times, so it can result in a leak of the existing token and an unauthorised password change. Patches The issue is fixed in versions: 1.10.11,...

CVE-2022-24743 Insufficient Session Expiration in Sylius

Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set to null after the password was changed. The same token could be used several times, which could result in leak of the existing token and unauthorized password change. The issue ...

CVE-2022-24743: Insufficient Session Expiration

Sylius is an open source eCommerce platform. Prior to versions 1.10.11 and 1.11.2, the reset password token was not set to null after the password was changed. The same token could be used several times, which could result in leak of the existing token and unauthorized password change. The issue ...

CVE-2022-24744 Insufficient Session Expiration in shopware

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...

CVE-2022-24744 Insufficient Session Expiration in shopware

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...

Insufficient Session Expiration

Description The application failed to invalidate the session after changing the password and In this scenario changing the password doesn't destroy the other sessions which are logged in with old passwords. Proof of Concept 1.Login same account in two different browsers. 2.Try to change the...