In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Mend

Published: 2022-05-03T08:55:09.569345Z

Updated: 2024-09-16T19:09:20.842Z

Reserved: 2022-01-10T00:00:00

Link: CVE-2022-23063

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-05-03T09:15:09.140

Modified: 2024-11-21T06:47:54.710

Link: CVE-2022-23063

cve-icon Redhat

No data.