Description
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser.
Unscored
CVE-2021-37333
EUVD-2021-23902GHSA-9rfx-mm7m-3cg2
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/chan…
Published Oct 4, 2021 · Updated Aug 4, 2024 · Assigned by mitre