CVE-2020-23140

Microweber 1.1.18 is affected by insufficient session expiration

published November 9, 2020

CVSS
—
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01031 · 63.4th percentile
Published
2020-11-09T17:03Z
EPSS history
Timeline
  • 09 NOV 17:03Z
    Microweber 1.1.18 is affected by insufficient session expiration
    cvelistv5