Unrated severityNVD Advisory· Published May 3, 2022· Updated Sep 16, 2024
Shopizer - Insufficient Session Expiration
CVE-2022-23063
Description
In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2>=2.3.0, <=3.0.1+ 1 more
- (no CPE)range: >=2.3.0, <=3.0.1
- (no CPE)range: 2.3.0
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.