Low severity3.7NVD Advisory· Published Sep 16, 2022· Updated Jun 17, 2026
CVE-2021-42948
CVE-2021-42948
Description
HotelDruid Hotel Management Software v3.0.3 and below was discovered to have exposed session tokens in multiple links via GET parameters, allowing attackers to access user session id's.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- HotelDruid/Hotel Management Softwaredescription
- Range: <=3.0.3
Patches
Vulnerability mechanics
References
2- www.hoteldruid.comnvdProductVendor Advisory
- github.com/dhammon/SecuritynvdBroken Link
News mentions
0No linked articles in our index yet.