What’s Vulnerable › Vulnerabilities

CVE-2020-23140

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-11-09 · updated 2026-06-17
• Weakness: CWE-613

Description

Microweber 1.1.18 is affected by insufficient session expiration. When changing passwords, both sessions for when a user changes email and old sessions in any other browser or device, the session does not expire and remains active.

Affected products

• microweber/microweber: 1.1.18

References

• https://gist.github.com/virendratiwari03/bddafb3cd82dde8202bd056d340d3e36
• https://gist.github.com/virendratiwari03/bddafb3cd82dde8202bd056d340d3e36

Get alerted when CVE-2020-23140 or the next vulnerability affects your stack