CVE-2026-63400
2026-10-30
23h17 +00:00
23h17 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
CVE 설명
Coop is an open source review and moderation tool from ROOST. Prior to 1.0.2, `resetPasswordForToken` updates the password row without invalidating database-backed sessions. An attacker who has acquired a password and established a session retains access even after the legitimate user resets the password, leaving the compromised account under attacker control until the session expires at its `30-day` maximum age. This issue is fixed in version 1.0.2.
CVE 정보
관련 약점
| 약점 이름 | 출처 | |
|---|---|---|
| DEPRECATED: Insufficient Session Expiration This entry has been deprecated because it was insufficiently clear. Consider CWE-1462 and its descendants. |
