Microweber v1.1.18 is affected by no session expiry after log-out.
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
Link | Tags |
---|---|
http://microweber.com | product |
https://gist.github.com/virendratiwari03/0b0d161e1141fdd74122abbb02fefe17 | third party advisory |