CVE-2019-11018
CVE-2019-11018
This page contains facts from public vulnerability sources. Check the original advisory before updating.
application\admin\controller\User.php in ThinkAdmin V4.0 does not prevent continued use of an administrator's cookie-based credentials after a password change.
CVSS 9.8 · Critical · EPSS 1.4%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zoujingli/thinkadmin Packagist
- Versions
- 4.0
No fix published