critical9.8
CVE-2021-37333
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management.
Impact
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bookingcore | Booking Core | Version 2.0 |