Non évaluée
DayByDay CRM - Insufficient Session Expiration after Password Change
CVE-2022-22113
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web whitesourcesoftware.com