CVE-2021-42948

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to…

published September 16, 2022

CVSS
—
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00846 · 57.6th percentile
Published
2022-09-16T15:14Z
EPSS history
Timeline
  • 16 SEP 15:14Z
    HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to…
    cvelistv5