PT-2018-10594

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue concerns a session management problem in the Users tab. Specifically, changing a password at the "users/1/edit" endpoint does not invalidate an open session in a different browser. Recommendation...