mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-13 05:54:46 +02:00
702 B
702 B
CVE-2021-37333
Description
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser.
POC
Reference
Github
No PoCs found on GitHub currently.