Unrated severityNVD Advisory· Published May 3, 2022· Updated Sep 16, 2024
Shopizer - Insufficient Session Expiration
CVE-2022-23063
Description
In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
Affected products
1- Range: 2.3.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.