Detections
Analytics
CVE-2020-23140
high
Description
Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active.
References
https://gist.github.com/virendratiwari03/bddafb3cd82dde8202bd056d340d3e36