high8.1
CVE-2020-23140
Microweber 1.1.18 is affected by insufficient session expiration.
Impact
Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microweber | Microweber | Version 1.1.18 |