CVE-2022-23063

In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.

In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.

En Shopizer versiones 2.3.0 a 3.0.1, son vulnerables a una Expiración de Sesión Insuficiente. Cuando una contraseña ha sido cambiada por el usuario o por un administrador, un usuario que ya estaba conectado, seguirá teniendo acceso a la aplicación incluso después de haber cambiado la contraseña